Hi, what are you looking for?
SecurityWeek
Black Hat
Hundreds of companies and organizations showcased their products and services last week at the 2024 edition of the Black Hat conference in Las Vegas.
Black Hat
SaaS app log analysis highlights the rapid smash and grab raid: in, steal, and leave in 30 minutes.
Black Hat
Researcher showcases hack against Microsoft Windows Update architecture, turning fixed vulnerabilities into zero-days.
Black Hat
Cris Thomas, also known as Space Rogue, was a founding member of the Lopht Heavy Industries hacker collective.
Black Hat
Sin City, A.K.A Las Vegas, Nevada – is once again playing host this week to the Black Hat and DEFCON security conferences. With throngs...
Black Hat
In the hours proceeding the annual Hack In The Box conference in Amsterdam, researcher Don Bailey visited Boston, Afghanistan, Libya, and at the White...
Application Security
Today at Black Hat DC, Microsoft is releasing a beta version of Attack Surface Analyzer, a new (and free!) tool designed to help assess...
Application Security
As the year comes to a close, we thought it would be appropriate to highlight some of the best stories and columns for 2010....
Black Hat
Samy Kamkar, in an incredibly interesting session at Black Hat titled “How I Met Your Girlfriend,” highlighted new types attacks executed from the Web.
Black Hat
It has been a busy week for Qualys at Black Hat in Las Vegas. Earlier in the week the company announced the ability to...
Black Hat
The presentation "Jackpotting Automated Teller Machines" was originally on the schedule at Black Hat USA 2009 but the talk was pulled at the last...
Black Hat
The presentation "Jackpotting Automated Teller Machines" was originally on the schedule at Black Hat USA 2009 but the talk was pulled at the last...
Application Security
Today at Black Hat USA 2010 in Las Vegas, Qualys will unveil an open source web application fingerprinting engine that identifies application and plugin...
Black Hat
Sourcefire Razorback - Open Source Framework Ties Together Various Threat Collection and Detection TechnologiesSourcefire, Inc. (Nasdaq:FIRE), a provider cybersecurity solutions, this week is launching Razorback,...
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)