Risk Management articles

The average cost of a data breach in 2023 was $4.45 million — a 15% increase over three years, marking yet another year in which the average cost has risen significantly. Yet, costs can balloon even higher. Just recently, Change Healthcare had to shell out billions after its breach earlier this year. With the devastatingly high costs of cyberattacks, acting only after you’ve been compromised is a good way to incur some heavy payments or, in some cases, even go […]

As the famous saying goes, “Those who cannot remember the past are condemned to repeat it.”

Employees are a major attack vector for threat actors targeting organizations. Recent research by Stanford University confirms this, revealing that 88% of all data breaches are caused by human error. These human errors might be as simple as sending an email to an incorrect address or leaving a database publicly viewable; but they can also be more involved, as when employees become victims of targeted phishing campaigns. Let’s detail how employees might be increasing risk for organizations and what organizations […]

When you come across a threat that seems mundane at first glance, is it OK to let AI try to mop it up on its own?

Banks with safe deposit vaults don’t set them up so that every box gets the same key. But when it comes to online accounts, we’re not always so careful…

HTTPS needed at least two decades to take hold, for a bunch of curious and sometimes contradictory reasons. Join Paul Ducklin for Part 2 of this peculiar but educational tale…

HTTPS needed at least two decades to take hold, for a bunch of curious and sometimes contradictory reasons. Join Paul Ducklin for Part 1 of this peculiar but educational tale…

Dire cybersecurity warnings about QR codes are commonplace, but is the risk really as bad as some vendors are saying?

What do you do when malware you’re chasing hasn’t left a copy of itself behind on disk? Or if it’s lying about where to find it, so you grab the wrong thing?

Sometimes, measurements and observations that seem obvious and intuitive turn out to be way off base.

These ‘bad guesses’ can lead to all sorts of risky conclusions, especially in cybersecurity.

Following our recent article series about VPNs, a reader asked about Tor, saying, “Can you give us a balanced view so we can figure it out for ourselves?”

The answer is: Yes!

The healthcare industry has had a rough start to 2024. It’s still reeling from February’s attack on Change Healthcare that brought production screeching to a halt. The breach shut down offices and healthcare facilities, cut off patient access to medication and care, and cost large hospitals and pharmacies upward of $100 million per day. Though Change has managed to get many of its systems back online, an American Medical Association survey conducted on April 29 found that 60% of respondents […]

Just how much security does a VPN give you?

What could go wrong with the security you think you’re enjoying, and what potential problems do you need to be aware of?

Just how much security does a VPN give you? What could go wrong with the security you think you’re enjoying, and what potential problems do you need to be aware of?