Content by Tom Field

Inside a Forensics Investigation

Tom Field  •  November 21, 2012

What are the key skills and tools forensics pros use in probing a data breach? What can we learn from recent breaches? Rob Lee of SANS Institute walks us through a typical forensics investigation.

Top 4 Cyberthreats of 2013

Tom Field  •  November 16, 2012

Cloud-based botnets and mobile malware are two of 2013's top cyberthreats. What other threats make the list? Georgia Tech's Paul Royal tells how security pros and organizations can prepare.

President Obama's Unfinished Business

Tom Field  •  November 7, 2012

If President Obama's second term were a movie sequel, I'd call it "Unfinished Business." It's time to step up and see through the cybersecurity initiatives Obama spoke about when he first took office.

Bank Attacks: What Next?

Tom Field  •  October 12, 2012

Do we have any reason to believe that any targeted banking institution will be better prepared next week to ward off a distributed denial of service attack like those that rocked three banks this week?

Incident Response: Choose Right Words

Tom Field  •  October 2, 2012

A denial of service attack may pose less immediate risk than a data breach - but it's trickier to respond to, says attorney Ronald Raether. What tips does he offer to organizations targeted by DDoS attacks?

Banks Under Attack: PR Missteps

Tom Field  •  September 28, 2012

Banks struck by the wave of DDoS attacks are communicating badly and missing a great opportunity to educate their customers about cybersecurity, says Gregory Nowak of the Information Security Forum.

iPhone 5 and Next-Gen Mobile Security

Tom Field  •  September 14, 2012

The iPhone 5 is coming, and so are a slew of new or upgraded smart phones and tablets. How should security leaders prepare for this new wave of mobility? Malcolm Harkins, CISO of Intel, offers advice.

Insider Fraud: The 'Low, Slow' Approach

Tom Field  •  September 4, 2012

Which employees are most apt to commit cyberfraud, and how can organizations detect and prevent their crimes? Researcher Randy Trzeciak shares insights and tips from a new insider threat study.

Mitigating Messaging Risks

Tom Field  •  August 27, 2012

E-mail, IM, text messaging - we all increasingly depend on messaging technologies. And so do the fraudsters. Craig Spiezle of the Online Trust Alliance discusses how to mitigate our vulnerabilities.

Talking Security with the Board

Tom Field  •  August 24, 2012

Information security leaders increasingly take risk concerns to their boards of directors. But do they accurately articulate their messages? Heartland Payment's CSO warns of the most common mistakes.

The Privacy Pro's Challenge

Tom Field  •  August 6, 2012

There have never been so many job opportunities for privacy professionals. Nor have there ever been so many challenges. Trevor Hughes of the IAPP discusses what it takes to grow a privacy career.

Global Payments Breach: Too Few Details

Tom Field  •  July 27, 2012

In the latest update, much was left unsaid about the Global Payments data breach. And if I were a Global customer or card-issuing entity, I'd have some serious follow-up questions.

Phishing Update: 'No Brand is Safe'

Tom Field  •  July 23, 2012

The number of phishing sites is at an all-time high. And so are the targeted brands. The message, says Peter Cassidy of the Anti-Phishing Working Group: "No brand is safe."

When Breach Planning Fails

Tom Field  •  July 20, 2012

When it comes to breach planning and response, well-intentioned organizations often go wrong. Experian Data Breach Resolution VP Michael Bruemmer tells where they fail and offers advice on how to do these important jobs right.

Practical Approach to Security

Tom Field  •  June 27, 2012

The UK Information Commissioner's Office has released a new security guide for small and midsized businesses. Simon Rice of the ICO discusses the guide and how to use it to avoid being breached.