Social Media Ideas for Infosec

Valuable insights for security professionals

International Security Expo is renowned for its unrivalled programme of high-level talks and expert speakers, bringing together leading voices from government, industry, academia a...

A Security Collection for the Security Chapter

ICF: Software Security Engineer- Cloud/GovCloud (Top Secret cleared)

Headquarters: Nationwide Remote Office (US99) URL: http://icf.com Please note: This role is contingent upon a contract award. While it is not an immediate opening, we are act...

Data breach du jour

No Sue, I had many security experts in my team. We had heavyweight security even before the internet was a thing. No vulnerabilities would be countenanced and we had regular, audit...

Information Security Management System (ISMS): What It Is and How It Works

These days, information is one of the most valuable assets a company has, and one of the most exposed. Most organizations protect their data with a patchwork of standalone measures...

Rapid7: Why wait for an alert? It’s already too late

ISJ hears exclusively from Thom Langford, CTO EMEA of Rapid7 about why security teams need to ditch detection and response. For as long as I’ve been in security, the approach has a...

The Asset Library Nobody Includes in the Security Review

Security teams map their data thoroughly. Customer records, financial systems, source code repositories, HR files: all identified, classified and controlled. Then there is the mark...

From point-in-time security to continuous cyber-resilience

ISJ hears exclusively from Kirsty Fowler, Managing Director of WorkNest Secure about the everchanging cybersecurity landscape. Cybersecurity has changed almost beyond recognition o...

Philip Ingram explores the fence, the badge and the firewall

The perimeter has dissolved – and security must follow, explains Philip Ingram MBE. The fence, the badge and the firewall used to be three separate problems, handled by three separ...

How Do Insider Threat Programs Defend Against Enterprise Insider Threats?

Think about how much access the average employee has on day one. Email, shared drives, customer records, maybe a few internal tools nobody remembers approving. Businesses hand out...

When Security by Obscurity Blinds the WAF: From Client-Side Encryption to Critical SQL Injection —…

Mapping Client-Side Encryption Across LATAM Banking and Fintech AppsContinue reading on Medium »

The methodology gap in physical security assessment

International Security Journal hears exclusively from Stephen Beels, Creator of IPSRM and physical security professional. Early in my career as a security consultant, I came to rea...

When Security by Obscurity Blinds the WAF: From Client-Side Encryption to Critical SQL Injection —…

TL;DR#1: In the first part of this post, we covered how Just Mobile Security’s offensive and research team identified a recurring pattern…Continue reading on Medium »

Confidential computing and the new regulatory focus on data in use

Most organizations already understand encryption at rest and encryption in transit. These controls are mature, widely deployed, and often explicitly referenced in security framewor...

Why security teams need recommendations – not notifications

Craig Sanderson, Principal Cyber Security Strategist, Infoblox highlights why security teams need recommendations – not notifications. Security has spent years solving a “visibilit...

Why supply chain security starts with protecting your data

ISJ hears exclusively from Simon Pamplin, Chief Technology Officer of Certes about protecting data from modern security threats. Many organisations still assume that once their dat...

Information Security in Project Management: Managing Security Risks

Information security in project management requires security considerations to be integrated into project initiation, planning, design, execution, testing, implementation, and clos...

Cybersecurity Consultancy and Training for Stronger Risk Management

Most business security failures do not start with a dramatic breach. They start with a missed update, a rushed password reset, a vendor who was never properly briefed, or a team th...

Why Secure Proxy Infrastructure Matters for Threat Intelligence

Threat intelligence has become an essential part of modern cybersecurity. Security teams, researchers, and threat analysts constantly monitor malicious infrastructure, investigate...

A proactive approach to critical infrastructure protection

As ISJ and MIRA Technologies look ahead to the webinar, ‘The Shift from Passive Security to Proactive Infrastructure Protection’, Digital Content Editor, Eve Goode, speaks exclusiv...

Information and Cybersecurity Externship II

Information and Cybersecurity Externship II Anonymous (not verified) Mon, 07/27/2026 - 11:54 CYB494 494 CYB CYB494 Information and Cybersecurit...

Interlock Turns the Tools Incident Responders Use Into Weapons for Stealing Windows Passwords

Interlock ransomware is taking a familiar Windows security tool and using it for credential theft. The group has turned memory analysis software into a way to pull password hashes...

IBMレポートから学ぶ「認証情報漏洩」の現状／飲食店予約システム 不正アクセス事例の解説

認証情報を盗み出す“インフォスティーラー”というマルウェアの被害が拡大しています。その影響はどのようなものなのでしょうか。エスカとレン、そふくリスが最新のサイバーセキュリティ動向を解...

We Open-Sourced Both Halves of Our Security Stack — Detection and Deliberation

We Open-Sourced Both Halves of Our Security Stack — Detection and Deliberation AEGIS catches the threat. ENLIL decides what it means. Both are free, and we want to know if they...