CSO Daily

Nov 26, 2018

Who is responsible for IoT security in healthcare?

NIST panel debates who should own IoT security: vendors or users. The issue is especially important when it comes to protecting medical devices. Read More ▶

Your Must-Read Stories

•	Review: ImmuniWeb offers true automated penetration testing

•	Why abandoned domain names are so dangerous

•	10 topics every security training program should cover

•	Hacking smart buildings

•	6 ways companies fail at security fundamentals

•	The best password advice right now

Review: ImmuniWeb offers true automated penetration testing

Its machine speed allows it to scale, while the human penetration testers ensure complete accuracy. Read More ▶

Why abandoned domain names are so dangerous

Abandoned domain names are low-hanging fruit for attackers, who can use them to access sensitive email or customer data. Read More ▶

10 topics every security training program should cover

A thorough end-user education program is a necessary weapon in the battle to protect your perimeter. These 10 topics are the baseline of what to include in an awareness training program. Read More ▶

Hacking smart buildings

Smart buildings are giant IoT devices begging to get hacked. A new report offers concrete advice on how to mitigate the risk to building automation and control systems (BACS). Read More ▶

6 ways companies fail at security fundamentals

A new report suggests many organizations are failing in the basic cyber hygiene efforts and leaving themselves exposed to hackers. Read More ▶

The best password advice right now

Short and crackable vs. long, complex and prone to reuse? The password debate rages on. Read More ▶

Editor's Picks

1.	10 essential enterprise security tools (and 11 nice-to-haves)
2.	7 best practices for negotiating ransomware payments
3.	Are long passphrases the answer to password problems?
4.	Bruce Schneier's Click Here to Kill Everybody reveals the looming cybersecurity crisis
5.	Cybercriminals are using blockchain to improve security. Should you?
6.	5 hard truths every CISO should know
7.	What it takes to be a security consultant

Get Security Smart

From the editors of CSO, Security Smart is a quarterly security awareness newsletter ready for distribution in your organization. Subscribe now and arm your employees with the information they need to be more secure at home and at work. Learn more.