Cloud Security
Google’s problems with in-the-wild Chrome browser zero-days appear to be multiplying by the month.
Hi, what are you looking for?
SecurityWeek
Cloud Security
Attendees will be able to interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.
Cloud Security
Hackers were seen making over 81 million login attempts originating from systems associated with hosting provider LSHIY.
Artificial Intelligence
AWS has patched the vulnerability and published its own advisory to inform customers about the potential impact.
Artificial Intelligence
Palo Alto Networks has disclosed the details of its analysis of Google Cloud Platform’s Vertex AI.
Application Security
Just weeks after a wave of major in-the-wild zero-day attacks against Exchange Server installations globally, Microsoft is raising a fresh alarm for four new...
Application Security
Vulnerability management is largely about patch management: finding, triaging and patching the most critical vulnerabilities in your environment. Each aspect of this process presents...
Application Security
Threat actors are leveraging the supply chain to deliver various types of threats to organizations, and few of them are spared from such attacks,...
Application Security
Threat actors are constantly targeting new vulnerabilities in SAP applications within days after the availability of security patches, according to a joint report issued...
Application Security
A sub-group of the 'Molerats' threat-actor has been using voice-changing software to successfully trick targets into installing malware, according to a warning from Cado...
Application Security
The United States Department of Defense (DoD) this week announced the launch of a new vulnerability disclosure program on HackerOne to identify vulnerabilities in...
Application Security
The U.S. government is warning that Advanced Persistent Threat (APT) actors are exploiting vulnerabilities in Fortinet FortiOS in ongoing attacks targeting commercial, government, and...
Cloud Security
A critical vulnerability recently addressed in the VMware Carbon Black Cloud Workload could be abused to execute code on a vulnerable server, according to...
Application Security
The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has issued a supplemental directive requiring all federal agencies to identify
Application Security
A pair of unpatched vulnerabilities in QNAP small office/home office (SOHO) network attached storage (NAS) devices could allow attackers to execute code remotely, according...
Application Security
Vulnerabilities Citrix patched in Hypervisor this week could allow for code executed in a virtual machine to cause denial of service on the host.
Application Security
A North Korean government-backed APT group has been caught using a fake pen-testing company and a range of sock puppet social media accounts in...
Audits
A vulnerability in the netmask npm package could expose private networks and lead to a variety of attacks, including malware delivery.
Application Security
Solarwinds has shipped a major security update to fix at least four documented security vulnerabilities, including a pair of bugs that be exploited for...
Application Security
Identity verification provider Jumio today announced a new $150 million investment round from private equity firm Great Hill Partners.
Cloud Security
Security Analytics and Threat Investigation Are in the Midst of a Sea Change
Cloud Security
Cloud security firm Orca has achieved “unicorn” status after raising $210 million in a Series C funding round that values the company at $1.2...
Application Security
Adobe has released an urgent patch for a potentially dangerous security vulnerability in Adobe ColdFusion, the platform used for building and deploying mobile and...
Application Security
Join this live webinar as we explore why exploitation is outpacing remediation, where risk is growing fastest, and what security leaders can do to close the gap before attackers take advantage.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)
Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most challenging balancing acts.
(Tod Beardsley)
Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences.
(Steve Durbin)
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.
(Matias Madou)