ThreatHuntersJournal
← Back
Policy & LegalCyberScoop·3 hours ago

The Collective Cyber Defense letter wrote your next vendor questionnaire

Over 200 companies have endorsed a collective cyber defense letter from August 27 that establishes three key security metrics: coverage, containment speed, and fix effectiveness. These company-backed metrics are now shaping vendor questionnaires and assessment criteria across the industry. The initiative reflects a coordinated effort to standardize cyber defense expectations in an AI-driven threat landscape.

Read full article at CyberScoop ↗

Related Articles

Policy & LegalHelp Net Security·7 hours ago

LastPass enhancements improve visibility, governance, and control

LastPass announced a series of strategic product innovations, customer experience enhancements, and industry milestones. These advancements reflect the company’s continued focus on providing practical tools to protect access and identity in an increasingly AI-driven threat landscape. Highlights include new tools that simplify access management, enhancements that help customers get more value from LastPass, and milestones that demonstrate the company’s continued growth and industry leadership. The LastPass commitment to visibility, governance, and control comes at a … More → The post LastPass enhancements improve visibility, governance, and control appeared first on Help Net Security.

Policy & LegalHelp Net Security·8 hours ago

NIS2 compliance: Fixing IAM and access control before the 2026 audit

The NIS2 Directive imposes legally binding obligations on EU organizations regarding supply chain risk management, incident reporting, and board-level accountability, with October marking a critical enforcement phase across member states. Essential entities face fines up to €10 million for non-compliance, making Identity and Access Management (IAM) and access control critical priorities ahead of the 2026 audit deadline.

Policy & LegalHelp Net Security·9 hours ago

What your vendor says about PQC tells you if they are ready

In this interview with Help Net Security, Dr. Yaakov Stein, VP CTO of Allot, discusses what post-quantum readiness looks like inside a mobile network. The discussion covers which operator traffic stays sensitive for years, including subscriber identity mappings, billing records and call metadata, and which becomes worthless within hours. It walks through the order of work, starting with a crypto inventory and hybrid key exchange on TLS interfaces, then IPsec links. It also names the … More → The post What your vendor says about PQC tells you if they are ready appeared first on Help Net Security.