Black Hat
A survey from security firm nCircle suggests that retaliatory hacking is not universally frowned upon.
Hi, what are you looking for?
SecurityWeek
Black Hat
Hundreds of companies and organizations showcased their products and services last week at the 2024 edition of the Black Hat conference in Las Vegas.
Black Hat
SaaS app log analysis highlights the rapid smash and grab raid: in, steal, and leave in 30 minutes.
Black Hat
Researcher showcases hack against Microsoft Windows Update architecture, turning fixed vulnerabilities into zero-days.
Black Hat
Cris Thomas, also known as Space Rogue, was a founding member of the Lopht Heavy Industries hacker collective.
Black Hat
LAS VEGAS - BLACK HAT USA - A panel of security and privacy experts engaged in a free-wheeling discussion of how enterprises have invested...
Black Hat
LAS VEGAS - BLACK HAT USA - The Federal Bureau of Investigation revamped its approach to fighting terrorists after 9/11. Corporate America can apply...
Black Hat
Security researcher Don C. Weber spoke about OptiGuard, a tool that can be used to assess the security of smart meters. The talk was...
Application Security
Trustwave and Microsoft Team to Bring Open-Source Web Application Firewall ModSecurity To IIS and Ngix Web Servers
Black Hat
Some of the world's largest banks are operating while infected with serious malware, according to a recent report.
Black Hat
LAS VEGAS – BLACK HAT CONFERENCE – Microsoft today released the Enhanced Mitigation Experience Toolkit (EMET) 3.5 Technology Preview, which adds new Return Oriented...
Black Hat
The More We Understand About How the Bad Guys Operate, The Better off We Will Be...
Black Hat
Zero-day disclosures, new tools and exploits abound in this year's Black Hat conference in Las Vegas. Next week, the Caesar's Palace hotel in Las...
Black Hat
Ever since the invention of the lock, someone (somewhere) has tried to defeat it, often going to extremely creative lengths to do so. Such...
Black Hat
HTML5 brings with it the promise of increased functionality. More functionality however, as usual, comes with a price – an increased attack surface.
Black Hat
Austrian programmer and security analyst Peter Kleisnner is slated to unveil the first known bootkit for Windows 8 at the upcoming MalCon security conference...
Application Security
If Patch Tuesday is a party, this would be the IT security version of pre-gaming.On Aug. 9, Microsoft accidentally released information on the five...
Application Security
Last week at the Black Hat Conference in Las Vegas, SaaS-based IT security solution provider Qualys, made several announcements including a new QualysGuard Consultant...
Black Hat
As usual, Black Hat USA brought with it a new round of exploits, innovative hacks and offensive and defensive tools.
Black Hat
Security was a key part of the pitch around Chrome OS when Google started revealing details of the operating system back in 2009. Fast...
Black Hat
Application Security
Surrounding the Black Hat Conference set to take place this week in Las Vegas, Veracode, a provider of cloud-based application risk management solutions, today...
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)