https://karenkent.journoportfolio.comRSS Feed for Karen KentenThu, 11 Jun 2026 00:00:00 +0100https://csrc.nist.gov/pubs/ir/8374/r1/finalThis CSF 2.0 Community Profile identifies the security outcomes from the NIST CSF 2.0 that support governing management of, identifying, protecting against, detecting, responding to, and recovering from ransomware events. The Profile can be used as a guide to managing the risk of ransomware events. That includes helping to gauge an organization’s level of readiness to counter ransomware threats and to deal with the potential consequences of events.Thu, 11 Jun 2026 00:00:00 +0100https://csrc.nist.gov/pubs/ir/8374/r1/finalhttps://www.techtarget.com/searchsecurity/tip/SOC-vs-MDR-What-CISOs-need-to-considerLet's examine how SOC and MDR services compare and identify key considerations when choosing the best option for your organization.Mon, 18 May 2026 00:00:00 +0100https://www.techtarget.com/searchsecurity/tip/SOC-vs-MDR-What-CISOs-need-to-considerhttps://www.techtarget.com/searchsecurity/tip/Leading-enterprise-password-managers-to-considerAdmins need their password managers to provide a wide range of features and capabilities. Learn what every password manager must have, along with available options.Thu, 07 May 2026 00:00:00 +0100https://www.techtarget.com/searchsecurity/tip/Leading-enterprise-password-managers-to-considerhttps://www.techtarget.com/searchsecurity/answer/What-are-the-most-common-digital-authentication-methodsTo authenticate users, security teams have a range of options available. Note, however, that a combination of methods is the best and safest approach.Wed, 29 Apr 2026 00:00:00 +0100https://www.techtarget.com/searchsecurity/answer/What-are-the-most-common-digital-authentication-methodshttps://www.techtarget.com/searchsecurity/tip/Shadow-code-The-hidden-threat-for-enterprise-ITThe shadow code running in your web apps could be a ticking time bomb. Learn more about the cybersecurity risks of shadow code and how to protect your enterprise.Tue, 28 Apr 2026 00:00:00 +0100https://www.techtarget.com/searchsecurity/tip/Shadow-code-The-hidden-threat-for-enterprise-IThttps://csrc.nist.gov/pubs/sp/1800/40/ipdDraft NIST SP 1800-40, Automation of the NIST Cryptographic Module Validation Program, to demonstrate how structured test evidence, standardized submission protocols, and modernized computing infrastructure can streamline the submission and review process.Wed, 15 Apr 2026 00:00:00 +0100https://csrc.nist.gov/pubs/sp/1800/40/ipdhttps://www.techtarget.com/searchsecurity/tip/Next-generation-firewall-buyers-guide-for-CISOsNGFWs are crucial tools for modern security operations, but CISOs need to understand the often complex deployment, maintenance and budgeting implications.Thu, 09 Apr 2026 00:00:00 +0100https://www.techtarget.com/searchsecurity/tip/Next-generation-firewall-buyers-guide-for-CISOshttps://www.techtarget.com/searchsecurity/tip/10-enterprise-secure-remote-access-best-practicesRemote access is a critical necessity in today's work-from-anywhere environment. It's also incredibly risky. But there are ways to protect assets and combat potential attacks.Tue, 24 Mar 2026 00:00:00 +0000https://www.techtarget.com/searchsecurity/tip/10-enterprise-secure-remote-access-best-practiceshttps://www.techtarget.com/searchsecurity/tip/Top-vulnerability-scanning-tools-for-security-teamsUse these vulnerability scanning tools to find weaknesses and potential exploits in web applications, IT and cloud infrastructure, IoT devices and more.Mon, 23 Mar 2026 00:00:00 +0000https://www.techtarget.com/searchsecurity/tip/Top-vulnerability-scanning-tools-for-security-teamshttps://csrc.nist.gov/pubs/cswp/36/e/5g-network-security-design-principles/finalThis white paper describes the network infrastructure design principles that commercial and private 5G network operators can use to improve cybersecurity and privacy. Such a network infrastructure isolates types of 5G network traffic from each other: data plane, control plane, and operation and maintenance (O&M) traffic.Thu, 19 Mar 2026 00:00:00 +0000https://csrc.nist.gov/pubs/cswp/36/e/5g-network-security-design-principles/finalhttps://csrc.nist.gov/pubs/cswp/36/d/no-supi-based-paging-applying-5g-cybersecurity-and/finalThis white paper provides an overview of “no Subscription Permanent Identifier (SUPI) based paging,” a 5G capability for protecting users from being identified and located by an attacker. Unlike previous generations of cellular systems, new requirements in 5G standards protect subscriber confidentiality by using a temporary identity (ID) instead of SUPI for the paging protocol, and explicitly define when the temporary ID must be reallocated (refreshed).Thu, 19 Mar 2026 00:00:00 +0000https://csrc.nist.gov/pubs/cswp/36/d/no-supi-based-paging-applying-5g-cybersecurity-and/finalhttps://csrc.nist.gov/pubs/cswp/36/c/reallocation-of-temporary-identities-applying-5g-c/finalThis white paper describes how 5G standards have enhanced the implementation guideline to protect subscriber identities (IDs), specifically how the network reallocates temporary IDs to protect users from being identified and located by an attacker. Unlike previous generations of cellular systems, new requirements in 5G explicitly define when the temporary ID must be reallocated (refreshed).Thu, 19 Mar 2026 00:00:00 +0000https://csrc.nist.gov/pubs/cswp/36/c/reallocation-of-temporary-identities-applying-5g-c/finalhttps://csrc.nist.gov/pubs/cswp/36/b/using-hardware-enabled-security-to-ensure-5g-syste/finalThis white paper provides an overview and an example of employing hardware-enabled security capabilities to provision, measure, attest to, and enforce the integrity of the compute platform to foster trust in a 5G system’s server infrastructure. It discusses security threats within computing environments and how leveraging hardware roots of trust (HRoT) and remote attestation can help mitigate specific threats.Thu, 19 Mar 2026 00:00:00 +0000https://csrc.nist.gov/pubs/cswp/36/b/using-hardware-enabled-security-to-ensure-5g-syste/finalhttps://csrc.nist.gov/pubs/cswp/36/a/protecting-subscriber-identifiers-with-suci-applyi/finalThis white paper describes how Subscription Concealed Identifier (SUCI) protection can be enabled in 5G networks. SUCI protection is defined by 5G standards as an optional security capability for operator deployments. By enabling SUCI on their 5G networks and subscriber SIMs, and configuring SUCI to use a non-null encryption cipher scheme, 5G network operators can provide their customers with the advantages of SUCI’s protections.Thu, 19 Mar 2026 00:00:00 +0000https://csrc.nist.gov/pubs/cswp/36/a/protecting-subscriber-identifiers-with-suci-applyi/finalhttps://csrc.nist.gov/pubs/cswp/36/applying-5g-cybersecurity-and-privacy-capabilities/finalThis document introduces the white paper series titled Applying 5G Cybersecurity and Privacy Capabilities. Each paper in the series includes implementation guidelines and testbed-derived implementation findings for an individual technical cybersecurity- or privacy-supporting capability available in 5G systems or their supporting infrastructures.Thu, 19 Mar 2026 00:00:00 +0000https://csrc.nist.gov/pubs/cswp/36/applying-5g-cybersecurity-and-privacy-capabilities/finalhttps://csrc.nist.gov/pubs/cswp/37/a/automation-of-the-nist-cryptographic-module-valida/finalNIST has undertaken the Automated Cryptographic Module Validation Project (ACMVP) to support improvement in the efficiency and timeliness of CMVP operations and processes. The goal is to demonstrate a suite of automated tools that would permit organizations to perform testing of their cryptographic products according to the requirements of FIPS 140-3, then directly report the results to NIST using appropriate protocols. This is a status report of progress made so far with the ACMVP and the planned next steps for the project.Mon, 16 Mar 2026 00:00:00 +0000https://csrc.nist.gov/pubs/cswp/37/a/automation-of-the-nist-cryptographic-module-valida/finalhttps://www.techtarget.com/searchsecurity/feature/Explore-this-NGFW-comparison-of-leading-vendors-on-the-marketThis article outlines key features and capabilities that CISOs and security decision-makers should consider when evaluating modern NGFWs and examines five top firewall options.Thu, 05 Mar 2026 00:00:00 +0000https://www.techtarget.com/searchsecurity/feature/Explore-this-NGFW-comparison-of-leading-vendors-on-the-markethttps://www.techtarget.com/searchsecurity/tip/How-to-reduce-false-positive-alerts-and-increase-cybersecurityFalse positives in cybersecurity detection tools drain resources and distract from real threats. Once CISOs understand the root causes of false positives, they can implement strategies to reduce them.Mon, 02 Mar 2026 00:00:00 +0000https://www.techtarget.com/searchsecurity/tip/How-to-reduce-false-positive-alerts-and-increase-cybersecurityhttps://www.techtarget.com/searchsecurity/tip/How-to-perform-a-data-risk-assessment-step-by-stepLet's dig into what a data risk assessment is and how to perform one.Mon, 02 Mar 2026 00:00:00 +0000https://www.techtarget.com/searchsecurity/tip/How-to-perform-a-data-risk-assessment-step-by-stephttps://www.techtarget.com/searchsecurity/tip/How-to-evaluate-NGFW-products-to-strengthen-cybersecurityNext-generation firewalls are critical tools in today's evolving threat landscape. Learn how to evaluate and select an NGFW that will bolster your company's cybersecurity posture.Wed, 18 Feb 2026 00:00:00 +0000https://www.techtarget.com/searchsecurity/tip/How-to-evaluate-NGFW-products-to-strengthen-cybersecurityhttps://csrc.nist.gov/News/2026/sp-1800-39-ipd-data-classification-practicesThis guide, Data Classification Practices, demonstrates how organizations can discover, identify, and label unstructured data using data classification practices.Tue, 10 Feb 2026 00:00:00 +0000https://csrc.nist.gov/News/2026/sp-1800-39-ipd-data-classification-practiceshttps://www.techtarget.com/searchsecurity/feature/Top-10-types-of-information-security-threats-for-IT-teamsCybersecurity teams must be mindful at all times of the current threats their organization faces. While it's impossible to thwart every threat, stopping as many as possible and quickly detecting when they occur are both critical for reducing damage. Here are 10 types of threats that cybersecurity teams should focus on.Thu, 05 Feb 2026 00:00:00 +0000https://www.techtarget.com/searchsecurity/feature/Top-10-types-of-information-security-threats-for-IT-teamshttps://www.techtarget.com/searchsecurity/tip/Top-open-source-and-commercial-threat-intelligence-feedsLet's take a closer look at cybersecurity threat intelligence feeds and highlight some leading options -- both open source and commercial.Wed, 04 Feb 2026 00:00:00 +0000https://www.techtarget.com/searchsecurity/tip/Top-open-source-and-commercial-threat-intelligence-feedshttps://www.techtarget.com/searchsecurity/tip/5-deepfake-detection-tools-to-protect-enterprise-usersLet's look at five of the top tools that CISOs can use today to detect deepfake videos entering their organizations.Fri, 30 Jan 2026 00:00:00 +0000https://www.techtarget.com/searchsecurity/tip/5-deepfake-detection-tools-to-protect-enterprise-usershttps://www.tcannex.com/p/nists-secure-software-developmentThe content updates from SSDF 1.1 to 1.2 are relatively small, but the changes in format and layout are significant, which makes it arduous to do a side-by-side comparison. To aid you in seeing what’s changed, we’ve created an annotated version. It highlights new content in green and changed content in orange (except for references). Each highlighted instance of changed content also has a callout box with the old text and the new text.Tue, 27 Jan 2026 00:00:00 +0000https://www.tcannex.com/p/nists-secure-software-developmenthttps://www.tcannex.com/p/five-takeaways-from-nist-sp-800-70To help public comment reviewers and anyone else interested in the details of the changes, we’ve done a side-by-side comparison of the revisions and identified the five most significant takeaways.Mon, 12 Jan 2026 00:00:00 +0000https://www.tcannex.com/p/five-takeaways-from-nist-sp-800-70https://www.techtarget.com/searchsecurity/tip/How-to-create-an-incident-response-playbookHere's a look at what incident response playbooks accomplish, why they are important and how to use them.Fri, 09 Jan 2026 00:00:00 +0000https://www.techtarget.com/searchsecurity/tip/How-to-create-an-incident-response-playbookhttps://www.tcannex.com/p/do-ai-chatbots-tell-the-truth-sixSix months ago, I tested five AI chatbots—ChatGPT, Claude, Copilot, Gemini, and Perplexity—to see how they performed when asked to provide a set of facts from a publicly available cybersecurity standard. The results were…not great.It’s time to repeat the tests and see how the chatbots’ performance has changed.Tue, 06 Jan 2026 00:00:00 +0000https://www.tcannex.com/p/do-ai-chatbots-tell-the-truth-sixhttps://csrc.nist.gov/pubs/ir/8286/r1/finalThis document is intended to help individual organizations within an enterprise improve their cybersecurity risk information, shared through their enterprise’s ERM processes.Thu, 18 Dec 2025 00:00:00 +0000https://csrc.nist.gov/pubs/ir/8286/r1/finalhttps://csrc.nist.gov/News/2025/draft-ssdf-version-1-2NIST has released the initial public draft of Special Publication (SP) 800-218r1 (Revision 1), Secure Software Development Framework (SSDF) Version 1.2: Recommendations for Mitigating the Risk of Software Vulnerabilities, per Executive Order 14306. This document describes new and improved practices, tasks, and examples for the secure and reliable development, delivery, and improvement of software.Wed, 17 Dec 2025 00:00:00 +0000https://csrc.nist.gov/News/2025/draft-ssdf-version-1-2