Application Security
Adobe on Tuesday warned that a gaping security hole in one of the most widely deployed software products has been exploited in the wild...
Hi, what are you looking for?
SecurityWeek
Cloud Security
Attendees will be able to interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.
Cloud Security
Hackers were seen making over 81 million login attempts originating from systems associated with hosting provider LSHIY.
Artificial Intelligence
AWS has patched the vulnerability and published its own advisory to inform customers about the potential impact.
Artificial Intelligence
Palo Alto Networks has disclosed the details of its analysis of Google Cloud Platform’s Vertex AI.
Cloud Security
The Pentagon is reconsidering how to make a massive shift to cloud computing, officials said Monday, suggesting it could scrap the so-called JEDI contract...
Cloud Security
Google has released a new open-source tool called cosign to make it easier to manage the process of signing and verifying container images.
Application Security
Researchers at anti-malware vendor Kaspersky are documenting a previously unknown Windows rootkit being used in the toolkit of an APT actor currently targeting diplomatic...
Cloud Security
The pandemic, among other variables, has greatly accelerated cloud adoption for many organizations in 2021.
Application Security
The massive blast radius from the Codecov supply chain attack remains shrouded in mystery as security teams continue to assess the fallout from the...
Cloud Security
US tech giant Microsoft pledged Thursday to process and store all European cloud-based client data in the European Union amid unease in the region...
Application Security
The United States Department of Defense this week announced an expansion of the scope of its vulnerability disclosure program to include all of its...
Application Security
Red Hat this week announced that it’s taking the first steps towards open-sourcing the StackRox container security product for Kubernetes.
Cloud Security
I’m glad this column is coming out now instead of earlier this year. Cloud security is more topical than ever when considering all the...
Cloud Security
MITRE announced last week that the latest update to the popular ATT&CK framework introduces techniques related to containers and the Google Workspace platform.
Cloud Security
Apple’s problems with zero-day attacks continued this week with news of another mysterious in-the-wild compromise affecting iPhones, iPads and macOS devices.
Application Security
DevSecOps company Sysdig on Wednesday announced becoming a “unicorn” after raising $188 million in a Series F funding round at a valuation of $1.19...
Application Security
Fraud prevention technology provider Sift is now the 11th cybersecurity company to reach “unicorn” status in 2021, following a new $50 million round of...
Application Security
A recently observed malware botnet targeting Linux systems is employing many of the emerging techniques among cyber-criminals, such as the use of Tor proxies,...
Cloud Security
Perception Point, an Israeli startup focused on protecting against threats coming through collaboration tools, email and other cloud-based services, announced this week that it...
Application Security
California-based cloud data protection and management firm Druva on Monday announced raising another $147 million, which brings the company’s valuation to more than $2...
Cloud Security
Former Chairman of the Federal Communications Commission (FCC), Ajit Pai, resigned on the day of President Biden’s inauguration. He was replaced by Acting Chairwoman...
Cloud Security
Cado Security, provider of a cloud-native digital forensics platform, has secured $10 million in Series A funding, which brings the total amount raised by...
Cloud Security
NVIDIA this week unveiled Morpheus, a cloud-native application framework designed to help cybersecurity providers analyze more data without sacrificing performance.
Join this live webinar as we explore why exploitation is outpacing remediation, where risk is growing fastest, and what security leaders can do to close the gap before attackers take advantage.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)
Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most challenging balancing acts.
(Tod Beardsley)
Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences.
(Steve Durbin)
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.
(Matias Madou)