Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Eoin Keary
Council Post: The Evolution Of Cybersecurity: From Traditional Penetration Testing To PTaaS And CTEM
Eoin Keary Founder & CEO of Edgescan, an enterprise CTEM (Continuous Testing and Exposure Management platform) used by Fortune 500's. On the ever-evolving treadmill of cybersecurity, organizations must continuously adapt to emerging threats and vulnerabilities coupled with new technologies, frameworks and tech paradigms. Traditional penetration testing, while valuable, is no longer sufficient to maintain a robust security posture.
Council Post: Why Automation Is Not A Cybersecurity Silver Bullet—Yet
Eoin Keary Founder & CEO of edgescan.com, an enterprise Attack Surface Management, Penetration as a Service & Vulnerability Management SaaS. When it comes to protecting an enterprise from a cybersecurity standpoint, leaders need to act fast, maintain visibility and detect threats as soon as possible. In the cybersecurity world, automation provides scale and consistency that can be used to deliver repetitious work and react fast to certain conditions.
Council Post: Cyber Vulnerability Statistics — 2021 In Review
Eoin Keary Founder and CEO of edgescan.com. getty We are publishing our 2022 vulnerability stats report in March, and I thought it would be a good idea to share some insights with you. Overall, things have not improved very much. We still see high rates of known (i.e., patchable) vulnerabilities that have working exploits in the wild used by known nation-state and cybercriminal groups.
Council Post: Three Ways To Protect Your Enterprise From Ransomware
Eoin Keary Founder and CEO of edgescan.com Ransomware is a real threat to global economies. It is possibly the first case of a cyber issue that has gone mainstream to the point that almost everyone knows what it means and how it can affect people. It causes disruptions to everything from energy to healthcare and civil society, and it shows no signs of stopping. So how did we get here?
400,000 Users Exposed By API Vulnerability - Expert Comment
Most of the modern web applications have serious vulnerabilities in their APIs and web services. Some vulnerabilities allow executing remote code and taking full control of the remote system. Such security flaws are usually undetectable by automated scanning tools due to their exploitation complexity. Few software developers have the requisite security skills to make complex cross-application eco-systems secure, while usage of a multi-cloud environment and containers boosts complexity and .....
Experts Responses on Verizon DBiR Findings
There were 3.3 Billion malicious login attempts. Think about that. World population is 7.6B, 61% of breaches involved credential data. This is why we and other experts urge organizations to use passwordless authentication. You cannot attack, steal, reuse, share, write down or divulge, something you don’t have. No password means no phishing, no credential stuffing, and no human error from forgotten passwords, shared passwords, reused passwords or weak passwords. This report underscores .....
Cybersecurity Expert Commentary: Hacker Claims To Have Stolen Files Belonging To Law Firm Jones Day
A targeted ransomware organisation strikes again. Jones Day has said that the breach occurred because of a third-party was compromised. This attack by CLOP highlights the need for organisations to install robust security that defends themselves before their intellectual property is being stolen or altered. This is a good example of a trend that we have seen emerging in 2020 and will continue to rise in 2021, that security protection tools have been (and will be) bypassed. It is becoming an .....
VIP Games Data Breach Exposes Millions Of Users' Data
It has been reported that casual gaming provider VIP Games has suffered a data breach, exposing millions of records relating to users of the service. VIP games have more than 20,000 active daily players and includes the popular games such as Hearts, Crazy Eights, Euchre, Rummy, Dominoes, Backgammon, Ludo, and Yatzy.
Mobile and Web App Security: Mitigating Risks and Protecting APIs
Sign Up Get up-to-the-minute news and opinions, plus access to a wide assortment of Information Security resources that will keep you current and informed.
Security Think Tank: Facing the challenge of zero trust
In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture?
Security Think Tank: Data-centric security requires context and understanding
The belief that effective perimeter security is the best way to protect data is a fallacy that is being repeatedly exposed. We must recognise the need for a data-centric security model to protect data from both internal and external threats, but what does this mean for security professionals? Some people say “the perimeter is dead”, but I think this statement is very far from reality.
Security puzzle calls for some joined-up thinking
The age of digitisation brings new risks to organisations, so security needs to be more integrated By Cliff Saran, Managing Editor Published: 28 Oct 2019 As the technology revolution rolls on, organisations around the world are starting to see the benefits of greater and greater levels of interconnectivity.
Security Think Tank: Focus on metrics to manage risk
How can security professionals help their organisations move from traditional governance, risk and compliance to integrated risk management that integrates risk activities from across an organisation to enable better strategic decision making? IT systems, in general, are moving towards software-defined networks and governance. From oversight and governance regarding IT networking to deployment of systems, much is software defined, and managed as such.
Security Think Tank: Use blockchain for integrity and immutability checks
Blockchain has been an overly-hyped solution for nearly everything, from finance to ledger integrity and smart contract, from peer-to-peer distribution to trust verification, but it has some uses in relation to information security. In terms of cyber security, blockchain can be applied to systems that require integrity checks and immutability.
Security Think Tank: Data architects should be key allies of infosec pros
The designing, creating, deploying and managing of an organisation’s data architecture and information security are two strictly intertwined aspects of an organisation’s security efforts. Vulnerability management is a continuous task. Discovery of vulnerabilities for newly deployed systems or detection of vulnerabilities previously unknown to the industry results in the requirement for constant vigilance and validation.
Risk is hiding in your application layer
To access this content please sign in or register below for free
New Strain Of Ransomware Targets Gamers And PC Users
Following the news that a new strain of ransomware is targeting gamers and PC users, Eoin Keary, CEO at edgescan, explains why the attack is targeting gamers and what users can do to protect themselves: New ransomware family “Anatova” discovered in a private p2p network. It fools users into downloading it by using the icon of a game or app. Anatova's code appears to support modular extension in the future.
How to Create and Maintain a DevSecOps Culture
The use of open source, speed of continuous integration and delivery, containerization and the move to the cloud all mean that a new approach to application security is needed. One solution is DevSecOps, where the feedback loops between DevOps and security are closed, teams are integrated and code development is more efficient. How easy is it to ensure a culture of DevSecOps though, and find those who will be a ‘champion’ of DevSecOps in your environment?
How to Prepare for the Worst DDoS with the Best Defense
Get up-to-the-minute news and opinions, plus access to a wide assortment of Information Security resources that will keep you current and informed.
4 Years and 4 Thousand Websites Worth of Vulnerability Assessments: W…
You are reading a preview. Activate your 30 day free trial to continue reading. Citigroup, Sony, PBS, Sega, Nintendo, Gawker, AT&T, the CIA, the US Senate, NASA, Nasdaq, the NYSE, Zynga, and thousands of others have something in common – all have had websites compromised in the last year. No company or industry is immune. It doesn't matter if a business is in financial services, retail, education, gaming, social networking, government, telecom, media or travel.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Eoin
Contact Eoin, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack