Content by Tom Field

2023 Cyber Bank Heists Report: The Rise of Punitive Attacks

Tom Field  •  February 10, 2023

Banking Trojans, ransomware, fake finance apps programmed to steal data - the cybercriminal cartels have become more punitive in 2023, escalating destructive attacks on financial institutions. This is just one key finding of the annual Cyber Bank Heists report by Contrast Security's Tom Kellermann.

Profiles in Leadership: Aleksandr Zhuk

Tom Field  •  January 24, 2023

As a veteran CISO who enjoys the startup culture and energy, Aleksandr Zhuk of crypto broker sFOX likens himself to the first family doctor coming to a growing village. He's addressing an important need that certainly existed prior, but was overlooked or maybe outsourced.

Zoom CISO's 2023 Cybersecurity Predictions

Tom Field  •  December 30, 2022

Phishing and other socially-engineered schemes are going to get bolder, the attack surface is only going to get bigger, and enterprises everywhere are going to have to focus more on building cyber resilience. These are among the New Year's predictions from Zoom's new CISO, Michael Adams.

Johnson & Johnson CISO Marene Allison to Retire

Tom Field  •  December 23, 2022

She has been a CISO almost longer than there has been cybersecurity. And now Marene Allison, CISO at Johnson & Johnson, eyes retirement and her next adventures. She reflects on her career, her accomplishments and what she wishes for her successor and the next generation of cybersecurity leaders.

Hearst CIO Atti Riazi on AI, Technology Innovation

Tom Field  •  December 21, 2022

"Disruptive" is the operative word, and Atefeh "Atti" Riazi uses it to describe the impact digital transformation has had on how we live, work, learn and conduct commerce. Newly hired as CIO of Hearst, she opens up on AI and the power of disruptive technologies to drive new business outcomes.

Let's Talk Security Observability

Tom Field  •  December 20, 2022

Observability is not necessarily a commonly understood term in cybersecurity circles. What exactly does it mean in context, and how does it relate to security? Jackie McGuire of Cribl discusses the observability pipeline and how best to build a solution.

Insights on the State of Security and Data

Tom Field  •  December 20, 2022

It's been another watershed year for cybersecurity practitioners and leaders. How would one describe the state of security and data as we head into 2023? Jackie McGuire of Cribl weighs in with her observations and predictions for the new year.

2023: Addressing the CISO's Many Challenges

Tom Field  •  December 16, 2022

From the cyberwar in Ukraine to ongoing ransomware threats and emerging global data regulations, 2022 has been a taxing year for CISOs. And they can expect more of the same in 2023, says Rodman Ramezanian of Skyhigh Security. He offers predictions and advice for the new year.

How to Predict New Account Risk

Tom Field  •  December 5, 2022

Application fraud has spiked - particularly bogus new accounts - and organizations are scrambling to improve fraud detection mechanisms without negatively affecting the legitimate customer's experience. Robin Love of Early Warning shares insights on how to better predict new account risk.

Use Obfuscation, Monitoring and RASP to Deepen DevSecOps

Tom Field  •  December 2, 2022

Resiliency is a core topic in OWASP's Mobile Application Security Verification Standard. What's key context to know? Dan Shugrue of Digital.ai discusses how to deepen a DevSecOps program by training developers in code obfuscation, anti-tamper, RASP and monitoring.

FortiGuard Labs: 2023 Threat Landscape Insights

Tom Field  •  November 7, 2022

Convergence of the threat landscape looms large for defenders, and Cybercrime as a Service potentially will enable more destructive attacks at scale. These are among the 2023 threat landscape predictions of Derek Manky of Fortinet's FortiGuard Labs. He shares these and other insights.

Strategies to Mitigate Risk During Mergers and Acquisitions

Tom Field  •  November 2, 2022

In 2021, U.S. mergers and acquisitions shot up 55%. In 2022, that percentage is set to climb even higher. The wave of post-COVID M&A demands that cybersecurity leaders improve their efficacy. Ben Murphy of Truist shares insight on where, when and how cybersecurity needs to influence the M&A agenda.

Spotting and Stopping Synthetic ID Fraud

Tom Field  •  October 27, 2022

Synthetic identity fraud is the fastest-growing financial crime in the country. By combining real and fabricated personal information, a synthetic identity is specifically designed to look and act like a valid identity - until it doesn’t, leaving financial losses and criminal activity in its wake.

Global Incident Response: Defenders Fight Back

Tom Field  •  October 27, 2022

API attacks are up, and lateral movement has become the new battleground. But VMware's latest Global Incident Response Threat Report shows that responders are starting to step up and fight back against attackers. Chad Skipper tells how and shares key findings from this new report.

The Quest for Non-Intrusive Security

Tom Field  •  October 25, 2022

Insanity in cybersecurity is trying the same failed approaches and hoping for different results. As new CSO at Traceable, Richard Bird wants to stop the insanity and bring a new, non-intrusive approach to defending the digital crown jewels - especially API.