Paul Wagenseil

Paul Wagenseil is custom content strategist for CyberRisk Alliance, leading creation of content developed from CRA research and aligned to the most critical topics of interest for the cybersecurity community. He previously held editor roles focused on the security market at Tom’s Guide, TechNewsDaily.com, SecurityNewsDaily.com, and spent nearly 10 years at FoxNews.com.

Female manager having a meeting with her team in office boardroom.

Leadership

Risk management challenges for CISOs and how to proceed

Paul WagenseilMarch 22, 2023

A CISO's job isn't just about fending off cyberthreats. It also involves keeping organizational leaders informed, nailing down an adequate security budget and making sure top team members aren't poached. Here are the top risk-related challenges facing CISOs today.

Internet security and data protection concept, blockchain.

Application security

How to declutter DevSecOps with DAST

Paul WagenseilMarch 7, 2023

Tech clutter and security debt can build up during software development and result in insecure, buggy apps. Here's how to use next-generation DAST tools and best development practices to reduce the noise and the risks.

Application security

How tech clutter complicates DevSecOps

Paul WagenseilMarch 3, 2023

False positives, misconfigurations and other "noise" can distract DevSecOps teams from attending to real vulnerabilities, which in turn leads to a buildup of security debt and ultimately unsafe software.

Cloud Computing Security Concept – Security Service Edge and Secure Access Service Edge – SSE and SASE – New Cloud-based Cybersecurity Solutions – 3D Illustration

Cloud security

SSE vs. SASE: What’s the difference?

Paul WagenseilFebruary 21, 2023

Many organizations know they need to upgrade to converged cloud security such as SASE or SSE but may not completely understand the concepts. Here are the differences between SASE and SSE, and which one might be better for you.

Threat actors have been using Microsoft’s third-party app verification process to target the cloud environments of business and financial executives, according to new research out this morning from Proofpoint. (Credit: atomicstudio via Getty Images)

Cloud security

SSE: Drivers and barriers to adoption

Paul WagenseilFebruary 21, 2023

There are many obvious benefits to implementing security service edge (SSE) – and also some potential obstacles to getting there. Here's how SSE can help, and how to get over the speed bumps.

A network defender participates in a cybersecurity exercise

Cloud security

Survey: Top 2023 security priorities are endpoint, cloud, incident response and identity management

Paul WagenseilFebruary 21, 2023

Cybersecurity and IT professionals placed endpoint security, cloud security and incident response high on a list of priorities for 2023, even as they ranked zero trust and threat intelligence far lower.

Application security

How to fix recent SQL injection vulnerabilities and avoid future attacks

Paul WagenseilFebruary 10, 2023

The latest strain of SQL injection attacks can bypass web application firewalls to strike at online apps and websites. Here's how your organization can protect itself.

Cyber security IT engineer working on protecting network against cyberattack from hackers on internet. Secure access for online privacy and personal data protection. Hands typing on keyboard and PCB

Data security

How the latest SQL injection attacks threaten web application firewalls

Paul WagenseilFebruary 6, 2023

Web application firewalls offer some of the best defenses against SQL injection attacks — but there's a new twist that flies under the radar and bypasses WAFs. Here's how it works.

Artificial intelligence concept of big data or cyber security. 3D illustration

Emerging technology

How AI and DAST can mitigate security risks

Paul WagenseilJanuary 27, 2023

Artificial intelligence poses a pretty scary threat to information security overall, but application-security testers should find AI to be extremely useful for finding flaws and weeding out false positives.

Cloud security

How to determine SASE needs specific to your IT environment

Paul WagenseilJanuary 23, 2023

Every SASE deployment is unique, so you'll need to be certain your implementation fits your environment. Here are 10 things you need to know and do before you make the switch.