InfoRiskToday.com is a news, information and education site for IT and non-IT executives, managers and professionals that focuses on information risk management, a process designed to protect an organization s information assets and business mission.

2 days ago · Image: Shutterstock The number of U.S. organizations falling victim to a data breach appears to be holding steady, as viewed on an annual basis, according to the latest annual data breach report from the Identity Theft Resource Center, which counted 3,158 reported data breaches in 2024, down just 1% from 2023. This article requires a full-access membership (free).

Governance & Risk Management Re-Imagining Identity and Access Management for 2025. Tom Field • January 24, 2025. The rise of machine identities is but one of several factors coming together to fundamentally change how enterprises need …

Governance & Risk Management CISA Warns of Flaws in Aircraft Collision Avoidance Systems. Prajeet Nair • January 23, 2025. Security researchers found an unpatchable flaw in the system that prevents commercial aircraft from crashing into each other, the U.S. federal government said in a Tuesday advisory that called the likelihood of its …

What we do. A tool for the 21st century, InfoRiskToday is delivered in a dynamic and interactive format. Our content is refreshed daily via news postings, interviews, blogs, agency releases, white papers, custom research, personalized email updates and interactive eBooks .all to meet the diverse needs of our ever-expanding audience.

2 days ago · SonicWall's Secure Mobile Access 1000 Series devices. (Image: SonicWall) Software vendors and national cybersecurity agencies are urging immediate patching of a critical SonicWall flaw days after the security device manufacturer disclosed that hackers are actively exploiting a zero-day.

Jan 22, 2025 · 57% of organizations reported at least one data breach caused by API exploitation in the past two years. Despite these breaches, organizations are still testing only 38% of their APIs for vulnerabilities on average, with a low confidence level—companies estimate they can only prevent 24% of API-related attacks.

2 days ago · An open-source reasoning model from Chinese artificial intelligence startup DeepSeek has the tech industry gauging its potential impact as shares of U.S. technology mainstays plummeted in trading on Monday. Hangzhou-based DeepSeek released its R1 model on Jan. 20, touting its performance as on par ...

Don't Get Schooled: Lessons From PowerSchool's Big Breach Why MFA and Data Minimization Remain Key for Preventing Massive Data Breaches. Mathew J. Schwartz • January 24, 2025 While PowerSchool's investigation into the massive theft of its customers' data is continuing, clear lessons have already emerged.

Attack Surface Management GoDaddy Pledges Improved Cybersecurity in US FTC Settlement. David Perera • January 15, 2025. Internet registrar and web host GoDaddy agreed to two decades worth of third-party assessments over its cybersecurity practices in a settlement with the U.S. FTC. GoDaddy in February 2023 attributed a run of hacking incidents that began in 2019 to a "sophisticated threat ...