Infosecurity Magazine

Risk Management News

Risk Management is an essential element of a strong security system. Learn how to build a strong risk management and compliance plan in several areas. Get information on risk and vulnerability assessment, security analytics and vulnerability management.

Scroll down for the latest risk management news and information.

Latest News and Features

Hacktivist-Driven DDoS Dominates Attacks on Public Sector

News

Claude Desktop Extensions Vulnerable to Web-Based Prompt Injection

News

Three of Anthropic’s Claude Desktop extensions were vulnerable to command injection – flaws that have now been fixed

Identity Is Now the Top Source of Cloud Risk

News

CISA and NSA Outline Best Practices to Secure Exchange Servers

News

CISA and NSA have released a blueprint to enhance Microsoft Exchange Server security against cyber-attacks

New GDI Flaws Could Enable Remote Code Execution in Windows

News

Leak Site Ransomware Victims Spike 13% in a Year

News

Critical Flaws Found in Elementor King Addons Affect 10,000 Sites

News

The King Addons for Elementor plugin contains two flaws allowing unauthenticated file uploads and privilege escalation

Proton Claims 300 Million Records Compromised So Far This Year

News

PHP Servers and IoT Devices Face Growing Cyber-Attack Risks

News

Open Source “b3” Benchmark to Boost LLM Security for Agents

News

White Papers

Gcore Radar: DDoS Attack Trends Q3 to Q4, 2023

White Paper

5 Ways to Strengthen Your Active Directory Password Policy

White Paper

Three Ways to Spot Insider Risk

White Paper

On-Demand Webinars

  • OT Security Ecosystem for Targeted Risk Reduction and Reporting
  • How to Implement Attack Surface Management in the AI and Cloud Age
  • Cyber Resilience in the AI Era: New Challenges and Opportunities
  • The Threat Intelligence Imperative: Transforming Risk into Cyber Resilience
  • Auditing AI Risk: Essential Strategies for IT & Compliance Leaders
  • Navigating Exposures in Energy ICS Environments
  • Identifying Concentration Risk and Securing the Supply Chain
  • How to Proactively Remediate Rising Web Application Threats
  • How to Optimize Third-Party Risk Management Programs Through NIST CSF 2.0
  • Experiencing a DDoS Simulation to Enhance Defenses

Podcasts

  • Can AI Solve the Vulnerability Problem in Critical Infrastructure?
  • Beth Maundrill and James Coker analyze Insider Threats as September is National Insider Threats Awareness Month.
  • James and Benjamin discuss Infosecurity Magazine's Editor Eleanor Dallaway's departure and review the recent Infosecurity Europe conference in London.
  • IntoSecurity Podcast Episode 33
  • IntoSecurity Podcast Episode 32
  • IntoSecurity Chats, Episode 7: Jessica Barker
  • IntoSecurity Podcast Episode 31, brought to you by Thales
  • IntoSecurity Podcast Episode 30
  • IntoSecurity Chats, Episode 6 - Graham Cluley
  • IntoSecurity Podcast Episode 29, brought to you by Thales

More news and features

BSI Warns of Looming AI Governance Crisis

News

How Businesses Should Approach the Post-Quantum Cryptography Transition

Interview

Transitioning to quantum-safe cryptography is not necessarily a top priority for every system of every organization, said the co-founder of Crypto Quantique

Chrome Zero-Day Actively Exploited in Attacks by Mem3nt0 mori

News

Actively Exploited WSUS Bug Added to CISA KEV List

News

Critical WordPress Plugin Bugs Exploited En Masse

News

Major Vulnerabilities Found in TP-Link VPN Routers

News

Ransomware Payouts Surge to $3.6m Amid Evolving Tactics

News

According to ExtraHop’s latest threat landscape report, average ransomware payments surged 44% to $3.6m in 2025 despite fewer incidents

Salt Typhoon Uses Citrix Flaw in Global Cyber-Attack

News

The CISO's Crucible – Finding Strength in Control

Opinion

Deloitte's Peter Gooch discusses how CISOs can overcome the immense strains and challenges of their roles

New Rootkit Campaign Exploits Cisco SNMP Flaw to Gain Persistence

News

Blogs

Bridging the Divide: Actionable Strategies to Secure Your SaaS Environments

Blog

The Serpent in the System: How Threat Actors Turn Legitimate Tools into Weapons

Blog

Next-Gen Infosec

How to Prevent Data Leakages

Next-Gen

Top Cloud Misconceptions that Could Damage Your Organization

Next-Gen

Improve Asset Visibility in OT Security With Hybrid AI-Cloud Approaches

Next-Gen