Welcome
CISSP® is the term used for the (Certified Information System Security Professional). An information systems security certification reflecting the qualification of information systems security practitioners. The CISSP® examination is a six (6) hours exam that consists of 250 multiple choice questions, covering topics such as Identity and Access Management, Asset Security, and Security and Risk Management Practices, and is administered by the International Information Systems Security Certification Consortium or (ISC)².
Hot Videos
-
Carnegie Mellon University’s new Chief Risk Officer (CRO) Certificate Program provides domain leaders with the latest skills and practices in risk management. The focus is on what CROs need to know to thrive in their jobs, including how to interact with executive leadership and how to analyze and dispose of enterprise risks. This six-month program consists of nine modules: four at our Pittsburgh campus (requiring three on-site trips) and five via synchronous distance technology. The CMU CRO Certificate Program is being developed and delivered by Carnegie Mellon University’s Heinz College of Public Policy and Information Systems, its Risk and Regulatory Services Innovation Center, and the CERT Division of the Software Engineering Institute (SEI).
Carnegie Mellon University’s new Chief Risk Officer (CRO) Certificate Program provides domain leaders with the latest skills and practices in risk management. The focus is on what CROs need to know to thrive in their jobs, including how to interact with executive leadership and how to analyze and dispose of enterprise risks. This six-month program consists of nine modules: four at our Pittsburgh campus (requiring three on-site trips) and five via synchronous distance technology. The CMU CRO Certificate Program is being developed and delivered by Carnegie Mellon University’s Heinz College of Public Policy and Information Systems, its Risk and Regulatory Services Innovation Center, and the CERT Division of the Software Engineering Institute (SEI).
-
Channel 4 News Published on Aug 1, 2013 Hundreds of employees of online store Amazon on zero hours contracts are subjected to a regime described as "horrendous" and "exhausting", it is claimed.
-
In this lecture, Professor Mickens continues the topic of buffer overflows, discussing approaches to such control hijacking attacks.
-
MIT 6.858 Computer Systems Security, Fall 2014 View the complete course: http://ocw.mit.edu/6-858F14 Instructor: Nickolai Zeldovich In this lecture, Professor Zeldovich gives a brief overview of the class, summarizing class organization and the concept of threat models.
Security researchers have documented an attack technique that may allow attackers to leverage a legitimate Amazon VPC feature to mask their use of stolen API credentials inside AWS.
- BEC scammers impersonate CEOs of targeted companies and request an aging report and clients’ email addresses from employees.
- In this way, the scammers will obtain a company’s customer names, outstanding balances, and contact information.
Facebook must pay a record-breaking $5 billion fine as part of a settlement with the Federal Trade Commission, by far the largest penalty ever imposed on a company for violating consumers' privacy rights.
- The vulnerability tracked as CVE-2019-1579 impacts all companies that use the GlobalProtect software, including the ride-sharing platform Uber.
- The impacted versions include PAN-OS 7.1.18, PAN-OS 8.0.11, and PAN-OS 8.1.2.
FireEye researchers identified a phishing campaign conducted by the cyberespionage group APT34 masquerading as a member of Cambridge University to gain their victim’s trust to open malicious documents.
Equifax will dish out as much as $700 million on the heels of its infamous 2017 data breach that impacted 150 million customers.
Ad injection and other "man-in-the-middle" techniques will have a tougher time installing themselves onto PCs.
44 per cent of Internet users admit having shared their passwords or stored them in visible places.
Frankly, I'm surprised. Is it the revelation that Juniper had "unauthorized code" in their Netscreen product? Is it that a third party could reportedly remotely access these systems? Is it that VPN traffic could be decrypted?
I'm seeing in the news today that a subset of Twitter users have been receiving notifications that they may well be the targets of surveillance by nation state actors. Step one, let's all take a deep breath.
A group of computer scientists at the Massachusetts Institute of Technology has developed the most secure SMS text messaging system.
Tens of millions of users would be unable to access HTTPS websites that only use SHA-2-signed certificates, Facebook and Cloudflare have warned
Millions of Web users could be left unable to access websites over the HTTPS protocol if those websites only use digital certificates signed with the SHA-2 hashing algorithm.
Cryptographic key reuse is rampart in European payment terminals, allowing attackers to compromise them en masse.
Security firm Zscaler discovered a malicious campaign based on a new strain of the Spy Banker banking malware.
FireEye says it has discovered a type of malware designed to steal payment card data that can be very difficult to detect and remove.
The cybercriminal group behind the malware, which FireEye nicknamed "FIN1," is suspected of being in Russia and has been known to target financial institutions.
The malware, which FIN1 calls Nemesis, infected an organization that processes financial transactions, which FireEye did not identify.
A criminal named Hacker Buba after asking UAE bank for $3 million ransom started leaking customer data online.
A new strain of PoS malware dubbed Pro PoS Solution is available for sale in the underground forums.
Like us on Facebook
Free CISSP Practice Exams
Post your events Free
From our Partners:
Censys is a new Search Engine for devices exposed on the Internet, it could be used by experts to assess the security they implement.
T-Mobile released a statement on Thursday informing customers that it has experienced a data breach in which attackers were able to gain access to “certain information.”
