Resources

The Future of Password Security | The Cybrary Podcast Ep. 54

Joining the Cybrary Podcast this week is Jeff Capone, CEO & Co-founder of SecureCircle. In this episode, Jeff, Mike, and Jonathan discuss zero-trust policies, why people use encryption, and what it would mean for data access, privacy, and security if we could make the need for passwords obsolete.

Zero Trust DLP

Zero Trust Data Security is a prevalent security architecture that is being adopted by many organizations today. A zero-trust solution requires the owner of the data to always be in control at all times. Before Zero Trust protection was even in the picture, DLP was the leading data security solution

Microsoft AIP Doesn’t Measure Up

Data security is a measure twice, cut once type of activity. Mistakes in data security are expensive. IBM's recent Cost of a Data Breach report states that the US's average data breach costs companies $3.84 million. Many data security solutions have a fatal flaw that creates a risk for data loss.

HIPAA & NIST 800-111

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that required the creation of national standards to protect sensitive patient health information from being disclosed without the patient's consent or knowledge.

The Zero Trust Data Journey (0 to Zero Trust in 2 steps)

What is Zero Trust? Many companies have adopted Zero Trust as their security framework. Zero Trust requires all users, even those inside the organization's enterprise network, to be authenticated, authorized, and continuously validating security configuration and posture before being granted or keeping access.

Where's Your Data? Who Cares!

Discovering and classifying data to protect it is challenging. Many of us tend to wonder, “Where is our data?” However, what many of us do not realize is that it does not matter where our data is, but how it is being protected.

Move Beyond DLP's Failures

DLP (Data Loss Prevention) solutions haven’t stopped data breach growth. IBM reports the average total cost of a data breach reached $3.86 million USD in 2020. DLP solutions only block or encrypt data that tries to leave the endpoint.

Zero Trust Data Security

Even with costly and complex data protection programs in place, data breaches and insider threats are still continually occurring. A reimagined approach to data security needs to be taken to mitigate these threats. Zero Trust is a security concept that requires the owner to have full control over every aspect of their

Conditional Data Access for Endpoints

Many people think about using Conditional access for SaaS applications or access to specific data sources. However, once that data is accessed, how do you continuously enforce conditional access "to the data" on an endpoint?

Cybersecurity 2021 Conferences

Regular attendees are expecting to join the main Cybersecurity Conferences to be held this year even though they will mostly be in a virtual mode. SecureCircle lists here the top 10 conferences that you cannot miss.

2021 Cybersecurity Predictions

As the calendar turns to a new year and we gladly put 2020 behind us, here are a few predictions for the new year.

Protecting Data That Egresses From Cloud Services & SaaS Applications

For a true Zero-Trust environment, it isn’t enough to think about data in cloud services and SaaS applications. We also must protect, control and audit data that egresses from these services onto endpoints.

2020 Recap

2020 has by far been one of the most challenging years for many of us. With everything that has been occurring in our world, it most certainly has brought us a collective amount of uncertainty. Overall, this year has been a wild ride and will most definitely go down in history.

Is Zero Trust Data Security Possible?

Some enterprises I've worked with that have deployed a zero trust (trust no one) model have still experienced data breaches. With zero trust implemented correctly, data breaches can be eliminated or minimized to small datasets.

Companies Need to Protect Trade Secrets

The road to a granted software patent continues to be a long, frustrating, and expensive process. In just a few years, old software can be replaced even before a patent application is complete. Typically, patent applications take about four years to complete, which is very time consuming for most companies. 

Preventing Palmerworm Espionage

SecureCircle helps eliminate data breaches from malicious external attacks such as Palmerworm and malicious and accidental insiders.

Zero Trust Data Security Webcast

Security Weekly hosts and SecureCircle's CEO, Jeff Capone, discuss Zero Trust Data Security. SecureCircle delivers a SaaS-based cybersecurity service that extends Zero Trust security to data on the endpoint. Ensure all your data is secure, without impacting the business.

Where's Your Data? Who Cares!

App, User, and Data, but it's all about the data! Discovering and classifying data to protect it is tough. What if you can protect all of your data? Jeff Capone, CEO and Co-founder at SecureCircle, joins Security Weekly to discuss how to protect all of your data and stop asking "Where's your data?". If we can protect

Zero Trust DLP Webcast

Security Weekly hosts and SecureCircle dive into Zero Trust DLP. Zero Trust Data Security is a very popular security architecture that is being adopted by many organizations. A zero-trust solution requires the owner of the data to always be in control at all times.

Quanta Storage Inc. Secures Customer Intellectual Property

QSI obtains customer intellectual property (IP) such as designs, roadmaps, costs, legal documents, and schedules. Customers are concerned about the safety of their IP. The IP includes traditional Office files, source code, mechanical design files, photos, videos, and more.

Securing Source Code on Endpoints

When deployed in a best practice configuration, SecureCircle can secure source code on endpoints without development teams needing to change how they operate or interact with code, IDEs, and development tools. This whitepaper focuses on SecureCircle best practices for securing source code in development environments.

Conditional Data Access for Endpoints

Security Weekly hosts and the CEO of SecureCircle, Jeff Capone, dive into how we can have conditional data access for endpoints. "Most folks think about using Conditional access for SaaS applications or access to specific data sources. However, once that data is accessed how do you continuously enforce conditional acce

Cybersecurity isn't Going to Work Until it is Simple

IBM recently reported in its fifth annual Cyber Resilient Organization Report 2020 that the average enterprise deploys 45 cybersecurity tools. Additionally, enterprises using over 50 tools ranked themselves 8% lower in their ability to detect threats and 7% lower in their defensive capabilities. Having more tools is no

Cybersecurity Breakthrough Award

In the 4th annual Cybersecurity Breakthrough Awards 2020, SecureCircle was recognized as the top Enterprise Encryption Solution of the Year.

National Cybersecurity Awareness Month

Now that work, school, and many other life aspects have shifted online this year, it is vitally important that we remember to take on cybersecurity precautions. Working from home introduces many new challenges for companies because their data is now in multiple different locations on different devices. Since October fo

Jeff Capone of SecureCircle: 5 Things You Need To Know To Optimize Your Company’s Approach to Data Privacy and Cybersecurity

As part of Authority Magazine's series about “5 Things You Need To Know To Optimize Your Company’s Approach to Data Privacy and Cybersecurity”, the CEO of SecureCircle, Jeff Capone, is interviewed by Jason Remillard. Capone shares his own experiences and tips that many organizations can use to enhance their own data pr

The Real Enterprise Data Protection Problem: CAD files and Other Legacy Apps Data

CISOs who have already invested in DLP but still have a laundry list of unprotected data use cases need not worry. This is the sad norm. DASB is a specialized solution that can immediately solve a specialized data protection use case such as CAD manufacturing designs, media files, images, and legacy data formats.

Need Zero Trust for a Remote Workforce? There's a Missing Link.

In today's work-from-anywhere world, there is a missing link. Controlling data once it is exported out of your perimeter and out of your SaaS apps. This is a rampant source of data leaks because no technology exists that can solve the problem at scale - until now. Welcome to DASB.

Zero Trust: SecureCircle plus Endpoint Detection and Response

The combination of SecureCircle with an advanced Endpoint Detection and Remediation solution provides the capability to affordably implement a Zero Trust security architecture that completely captures and controls all user’s interactions with our information no matter what.

Millions of Data Leaked Due to Unsecured Databases

Unsecured databases are quickly becoming a massive data security problem. Researchers have found close to 10.5 billion pieces of consumer data left vulnerable on almost 10,000 unsecured databases across 20 countries.

Enterprise Security Weekly | Zero Trust Data Security

Zero Trust Data Security is a very popular security architecture that is being adopted by many organizations. In this webcast, Paul Asadoorian of Security Weekly and SecureCircle walk through how SecureCircle implements a zero-trust solution. A zero-trust solution requires the owner of the data to always be in control

Traditional Data Security Fails to Be Zero Trust

Data security tools are not providing enough value for their customers. The average total cost of a data breach in the United States is nearly $9million per the 2020 IBM Cost of Data Breach Report. That is a five % increase from 2019. 31% of data breaches in North America can be attributed to internal actors.

Why Traditional Data Security Can't Be Zero Trust

The challenge in securing data has increased in complexity as businesses move aggressively to cloud and modernize IT through the use of SaaS applications. In this virtual training, Paul Asadoorian and SecureCircle will walk through how both legacy approaches struggle to plug the real world security holes.

Intel Internal Data Leaked By Server Hacker or Third-Party?

Yet again, another case of leaked data has hit the web. Intel, the largest chipmaker in the United States is investigating a data breach that leaked 20 GB of internal data. The assortment of documents included some marked as confidential, under NDA, and unrestricted secret. Till Kottman, a swift software engineer share

Cybersecurity Risks That Come With Remote Learning

For many students, back to school session is right around the corner. Under the new circumstances of remote learning, students need to become aware of the importance of data security. School districts in the United States already have many cybersecurity shortcomings. Many lack the funding and skilled personnel to provi

Why Legacy DLP Does Not Work

In today's world, it is ubiquitous for employees to abandon ship to board another one. It is also common for these employees to take confidential data with them when leaving. Data loss can become very damaging for the company, especially when the employee leaves for a competitor. Three former employers of McAfee left a

Protecting Data From The Threat of Ransomware

When engaging with customers, we focus heavily on finding ways to help them on their journey to implementing a Zero Trust security strategy. We often hear concerns about ransomware protection. Our customers tell us that they see value in how we deliver security that persists with data regardless but ask how this helps

Forrester features SecureCircle in Forrester Zero Trust eXtended Ecosystem

Forrester Research has named SecureCircle a 'Data Security Startup to Watch' in the August 2020 report - The Zero Trust eXtended Ecosystem: Data, Secure Data Independently and in each Pillar of the Zero Trust Framework

Cost of Data Breaches

With all of the unexpected changes occurring in 2020, some things remain the same. For its 15th year, the Ponemon Institute has conducted research to produce the annual Cost of Data Breach report published by IBM Security. This report provides a detailed view of the financial impacts, and risks security incidents can h

Garmin Suffers from a Multi-Million Dollar Ransomware Attack

Once again, a massive ransomware attack causes a global outage. Garmin, a sport and fitness tech giant reportedly paid millions of dollars in ransom after shutting down from the attack. The attack put Garmin’s wearables, apps, websites, and call centers offline for several days. The payment was presumed to be around $1

Making an ROI Case for SecureCircle

Many of our customers have budgeted projects to improve or replace existing data protection solutions, so the ROI (return on investment) case has been made upfront.

Hackers Targeting Small Enterprises

For an average hacker, small enterprises can be the perfect target. Many small enterprises tend to have less sophistication in their company's cybersecurity or assume that they are too small even to attract hackers.

Security Weekly Virtual Hacker Summer Camp Interview

For a true Zero-Trust environment, it isn’t enough to think about data in cloud services and SaaS applications, we also must protect, control, and audit data that egresses form these services onto endpoints. SecureCircle protects data that egresses from cloud services and allows you to have control over it.

The Missing Link For Zero Trust

The future holds endless possibilities. The next great moment, widget or experience is just around the corner. In cybersecurity, we have heard promises for a better future for decades.

Cybersecurity Strategies (Infographic)

The 2020 IBM Security Cyber Resilient Organization Report surveys more than 3,400 IT and security professionals from all over the world to determine their ability to detect, prevent, contain, and respond to cybersecurity incidents.

Data Security is Not Data Privacy

Often the terms data security and data privacy are misused or interpreted as the same thing. Since data security and data privacy are both essential components of data protection, it is vital to know the difference between the two. Think about it this way. You protect your house with a door. If the door is glass, does

Targets on Large Enterprises

Large enterprises have always been targets for hackers. Most hackers are mainly attracted to the massive amounts of capital and the customer base of large enterprises. According to the 2020 Verizon Data Breach Investigations Report, almost two-thirds of data breaches involved larger enterprises. 

Secured Files on Adobe Creative Cloud

Millions of designers rely on Adobe Creative Cloud to share and collaborate with others on their work. Without proper protection, many designers risk their work being leaked to the public. This would allow anyone to view and claim the designs as their own.

Brazil’s Version of GDPR is LGPD

Brazil initially passed LGPD (Lei Geral de Proteção de Dados) in 2018 to go into effect in February 2020. The implementation date pushed to August 16, 2020, which is about a month away. Is your company ready?

Source Code - Holy Grail of Data Protection

CISOs and CTOs have almost given up on the idea that protecting the company crown jewels - source code - is possible. Legacy data protection solutions encumbered developers to the point developers refused to work.

VPN False Sense of Security

VPNs (Virtual Private Networks) made headlines last week after the National Security Agency (NSA) warned corporations could be vulnerable to cyber-attacks if not correctly secured. The warning comes as organizations adapt to office closures, and employees continue to work from home.

Remote Workforce? Protect Your Data Wherever It Leaks

Companies need to enable their teams to work remotely across the world, including work from home. Remote distributed workforces have grown 44% over the last five years.

Healthcare Internal Threat Solution

The rate of internal threats is on the rise, leaving many organizations at risk. In some industries, they occur way more frequently whether it's accidental or malicious. The healthcare industry is one of the most commonly threatened.

The Ransomware Protection Solution

Ransomware continues to be a daily headline in the news. To prevent ransomware from infecting an organization, deploy SecureCircle and an Endpoint Detection and Response (EDR) solution. SecureCircle and EDR provide a productive ransomware protection solution.

NYPD Privacy Breach

The New York City council demands an investigation to determine how the mayor's daughter's arrest record was released on Twitter. They believe there are two guilty parties; those who committed the privacy breach from NYPD and those who knew about it and did not notify any city officials.

Popular App Mathway Leaks Users Records

Mathway, a popular app to assist students with math, suffered a massive data breach. More than 25 million user records have potentially been sold on the dark web by hackers known as the ShinyHunters.

What is Data Loss Prevention?

SecureCircle's unique features and overall approach to data loss prevention allow organizations to protect data without impacting end-users or changing business workflow. Organizations can support a wide range of use cases such as accidental and malicious insiders, and more.

Distributed-Workforce | Case Study

SecureCircle enables DMF to secure data with a distributed workforce without requiring employees to change their workflow. DMF maintains complete protection and control over their sensitive customer IP.

Follow the Data Breach and DLP Money

CISOs and IT departments have growing demands and limited budgets. Free up money and resources by selecting the proper DLP solution.

Law Firm Leaks Celebrity Data

The New York law firm of Grubman Shire Meiselas and Sacks that serves some of the many well-known celebrities such as Lady Gaga, Madonna, Mariah Carey, and U2 appears to have fallen into a REvil ransomware attack. 

Audits Don't Solve Security Problems

Forbes.com: GDPR is a first compliance regulation that doesn't rely on audits and fines organizations for noncompliance resulting in data breaches. Explore the requirements of GDPR as well as learn how SecureCircle reduces your GDPR risk.

Securing Source Code & Intellectual Property While Working From Home

One of the largest Original Design Manufacturer (“ODM”) companies in the world with design and manufacturing sites worldwide.

DASB Vs. DLP: Operational Overhead

By deploying an opt-out, protect by default solution, organizations can reduce the amount of time spent on maintaining DLP solutions and reduce data breaches caused by incomplete, insufficient, outdated, or conflicting policy rules. SecureCircle's DASB prevents data breaches and insider threats.

Avoid The High Cost Of Data Loss Prevention (DLP)

SecureCircle measures successful implementation in days and weeks. Our customers have complained that DLP and Information Rights Management (IRM) solutions have taken quarters to years to implement, if at all.

Modern Encryption from the Beginning : The Split-Key

Today we can experience a whole new world of encryption due to a man who led the way in cryptography. Thanks to Whitfield Diffie and his invention of public-key cryptography, we started down a path to provide privacy over digital communications and commerce.

What Do Zoom, Dog Walkers, And Encryption Have In Common?

The secure solution to grant access to the house without giving up control requires a broker to decide when the door should be unlocked. With today’s modern physical security tools, biometrics grants access.

DASB Replaces DLP

FSC has been mandated to protect sensitive financial and personal information for mandatory compliance requirements. In particular, FSC wants to protect and track sensitive data as soon as it is accessed from their SQL databases and transformed into flat files stored on their file servers.

Why Isn't DLP Preventing Data Breaches and Data Leakage?

Data loss prevention (DLP), the antiquated data protection model, takes a ‘manage by rule’ approach where all data flows freely unless the security team has written a rule to specifically protect the data.

Cyber Hygiene

Washing your hands for 20 seconds is excellent to prevent getting the cold or flu, but what are some cyber hygiene practices businesses can put in place to protect their IT systems and, more importantly, their data.

Security Risks From Employees Working From Home

More employees are working from home and causing additional security challenges. In a recent Wall Street Journal article citing information concerning Apple.

Is 'Discover, Classify, Protect' Wrong In Cybersecurity Today?

Forbes.com: Data protection has followed the same paradigm for years: discover, classify and protect. That paradigm exists because years ago, protection solutions were extremely painful to implement. Administrative overhead was high. The end-user impact was high.

Breadth Vs. Depth: Cybersecurity Industry Has Been Focusing On The Wrong Thing

Forbes.com: The cybersecurity industry's approach to data protection has only ever resolved the depth of security problems. There are data loss prevention (DLP), information rights management (IRM), encryption and many solutions available that can only protect a few pieces of data well.

Third Party Vendors

Health Share of Oregon, the state's largest Medicaid coordinated care organization, exposed personally identifiable information (PII) of 654,362 of its members, including names, addresses, phone numbers, dates of birth, Social Security numbers, and Medicaid ID numbers.

The Rise Of DASB, Sunset Your DLP

5 reasons why organizations are switching

How to Prevent Source Code Modification & Leaks

Source code breaches are occurring daily with damaging consequences. Uber and Google made headlines when a former Google engineer easily exfiltrated 9 GB of source code and hundreds of Waymo trade secrets. Tesla source code was breached by an employee, exfiltrating over 300,000 files for personal gain. Apple and Samsun

End Source Code Theft

CSC needed to ensure that their source code was not stolen or lost. A costly virtual desktop infrastructure (VDI) solution, was implemented to prevent misuse and add accountability for developers working with source code.

SecureCircle Data Access Security Broker (DASB) Selected By Quanta Storage To Eliminate Insider Threats

SecureCircle, the world's first Data Access Security Broker (DASB),today announced an agreement to eliminate insider threats such as accidental sharing and malicious users to Quanta Storage Inc. (QSI). QSI, a worldwide leader in OEM and ODM services to the world's leading consumer electronics brands is based in Taiwan.

Organizations Should Bulk Up Cybersecurity In Case Of Iranian Cyber Attack

Immediately after the United States assassinated Iranian Maj.

The Evolution of Data Protection

Forbes.com: Data protection solutions are finally evolving to the current state of data: distributed, cloud-centric and always-on. Data used to only exist within the corporate network on devices that never left the physical protection of the company.

Ransomware stealing data before encrypting

The second flavor of ransomware should only be an annoyance to organizations as a proper backup system should be able to restore to a point in time prior to the ransomware infection.

Insider Threats Infographic

Who collected 4 billion records on 1.2 billion users?

Over a week ago, security researchers Vinny Troia and Bob Diachenko uncovered four billion records on 1.2 billion people on an unsecured Elastisearch server.

Macy’s Unhappy Thanksgiving – Unauthorized Application Causes Data Breach

With SecureCircle’s DASB, organizations can eliminate unauthorized application threats.

Cisco Systems - Target of Malicious Insiders

Cisco Systems sued former senior employees for stealing thousands of files containing confidential information.

CSO | Take a new approach to data security: protect all of it

Don’t just pick and choose data and documents to protect: secure unstructured data, too.

EContent | How to Protect Your WordPress Site from Keylogger Malware

It’s probably not surprising that WordPress powers 30% of the internet. But you may be surprised to learn that, at the time of this writing, over 2,300 websites run on WordPress were infected by malware.

The Entrepreneur Way: Not Not Failing Is Not an Option with Jeff Capone

SecureCircle, which he co-founded in 2015. An award-winning executive leader with expertise in enterprise software development, network and storage solutions, and IoT applications.

2018 Secure Campus Awards

2018 Govies Awards

SDxCentral | Four Security Myths You Need to Shake

There is no place – internally or externally – or type of data that is safe. If we embrace that truth, then we won’t be lulled into a false sense of security.

MegaMinds AIthority Interview with Jeff Capone

Security Today | Digital Security in a Zero Trust World

CSO | The Impact of Human Behavior on Security

GDPR Compliance Tips: The Top Experts Speak

SecureCircle will be exhibiting at CIAB Sao Paulo Brazil June 2018

CSO | GDPR: Where are we now?

Strategic Finance | Security in a World of Zero Trust

Security Info Watch | Enterprises Beware: Cybersecurity Challenges in the Cloud

CSO | The hidden security problem we all need to know about

CTimes | SecureCircle and Netbridge Distribution Partnership (Chinese)