Content by Tom Field

Building Timely and Truthful LLMs for Security Operations

Tom Field  •  August 19, 2024

Many cybersecurity organizations hope generative artificial intelligence and large language models will help them secure the enterprise and comply with the latest regulations. But to date, commercial LLMs have big problems - hallucinations and a lack of timely data, said NYU professor Brennan Lodge.

Bridging the IT-OT Cultural Gap

Tom Field  •  June 4, 2024

Lorena Nunes, industrial cybersecurity specialist at Braskem, discusses how to bridge the cultural gap between IT and OT. She emphasizes the importance of building a cybersecurity culture and getting buy-in from leadership and rank-and-file employees.

Overcoming Regulatory Challenges in Renewable Energy

Tom Field  •  May 31, 2024

Joseph Couture, regional information security officer for the Americas and CISO for the United States at Ørsted, discusses the unique regulatory challenges in the energy sector, the importance of risk management, and how Ørsted addresses cybersecurity to ensure safe and reliable energy delivery.

FortiGuard Labs Global Threat Landscape Report: The Latest

Tom Field  •  May 18, 2024

It's not just the critical cybersecurity vulnerabilities; it's the speed at which adversaries are attacking them. This is one of the key findings of Fortinet's new FortiGuard Labs Global Threat Landscape Report. Fortinet's Derek Manky shares takeaways and analysis.

State of Software Security: Has It Moved Past Unacceptable?

Tom Field  •  May 10, 2024

The state of software security is constantly evolving, and although awareness around it has increased, the industry is no closer to solving the problem, said Brian Fox, co-founder and chief technology officer, Sonatype. Fox highlighted the crucial issues the industry continues to face.

Double-Click on Risk-Based Cybersecurity

Tom Field  •  May 5, 2024

In today's cybersecurity landscape, where threats such as ransomware evolve rapidly, organizations must shift their cybersecurity approach from technology-based to risk-based, said Niloofar Razi Howe, chair of the board, Pondurance. Opposite of that, she said, is to respond to threats as they come.

2023 Cyber Bank Heists Report: The Rise of Punitive Attacks

Tom Field  •  February 10, 2023

Banking Trojans, ransomware, fake finance apps programmed to steal data - the cybercriminal cartels have become more punitive in 2023, escalating destructive attacks on financial institutions. This is just one key finding of the annual Cyber Bank Heists report by Contrast Security's Tom Kellermann.

Profiles in Leadership: Aleksandr Zhuk

Tom Field  •  January 24, 2023

As a veteran CISO who enjoys the startup culture and energy, Aleksandr Zhuk of crypto broker sFOX likens himself to the first family doctor coming to a growing village. He's addressing an important need that certainly existed prior, but was overlooked or maybe outsourced.

Zoom CISO's 2023 Cybersecurity Predictions

Tom Field  •  December 30, 2022

Phishing and other socially-engineered schemes are going to get bolder, the attack surface is only going to get bigger, and enterprises everywhere are going to have to focus more on building cyber resilience. These are among the New Year's predictions from Zoom's new CISO, Michael Adams.

Johnson & Johnson CISO Marene Allison to Retire

Tom Field  •  December 23, 2022

She has been a CISO almost longer than there has been cybersecurity. And now Marene Allison, CISO at Johnson & Johnson, eyes retirement and her next adventures. She reflects on her career, her accomplishments and what she wishes for her successor and the next generation of cybersecurity leaders.

Hearst CIO Atti Riazi on AI, Technology Innovation

Tom Field  •  December 21, 2022

"Disruptive" is the operative word, and Atefeh "Atti" Riazi uses it to describe the impact digital transformation has had on how we live, work, learn and conduct commerce. Newly hired as CIO of Hearst, she opens up on AI and the power of disruptive technologies to drive new business outcomes.

Let's Talk Security Observability

Tom Field  •  December 20, 2022

Observability is not necessarily a commonly understood term in cybersecurity circles. What exactly does it mean in context, and how does it relate to security? Jackie McGuire of Cribl discusses the observability pipeline and how best to build a solution.

Insights on the State of Security and Data

Tom Field  •  December 20, 2022

It's been another watershed year for cybersecurity practitioners and leaders. How would one describe the state of security and data as we head into 2023? Jackie McGuire of Cribl weighs in with her observations and predictions for the new year.

2023: Addressing the CISO's Many Challenges

Tom Field  •  December 16, 2022

From the cyberwar in Ukraine to ongoing ransomware threats and emerging global data regulations, 2022 has been a taxing year for CISOs. And they can expect more of the same in 2023, says Rodman Ramezanian of Skyhigh Security. He offers predictions and advice for the new year.

How to Predict New Account Risk

Tom Field  •  December 5, 2022

Application fraud has spiked - particularly bogus new accounts - and organizations are scrambling to improve fraud detection mechanisms without negatively affecting the legitimate customer's experience. Robin Love of Early Warning shares insights on how to better predict new account risk.