Cloud Security
Security analytics and testing firm Rapid7 this week unveiled Project Heisenberg Cloud, a research project designed to use the cloud to get a closer...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.
Cloud Security
A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.
Cloud Security
A threat actor is claiming the exfiltration of millions of records from McDonald’s, TCS, Vodafone, and other large organizations.
Artificial Intelligence
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries...
Cloud Security
According to an analysis of more than 20,000 cloud services, only 6% can claim to be fully compliant with the European Union's General Data...
Cloud Security
CloudFlare announced on Tuesday the introduction of three new encryption features, including support for TLS 1.3, automatic HTTPS rewrites and opportunistic encryption.
Cloud Security
Oracle announced on Sunday that it has agreed to acquire Cloud Access Security Broker (CASB) firm Palerra for an undisclosed sum.
Cloud Security
The Xen Project reported on Thursday that it has patched a total of four vulnerabilities that can be exploited for privilege escalation or denial-of-service...
Cloud Security
VMware informed customers on Tuesday that it has addressed a couple of vulnerabilities that can be chained together and exploited by attackers to take...
Cloud Security
Cybercriminals have discovered a new method of hiding their nefarious activity on compromised machines, by using virtual machines (VMs), SecureWorks researchers warn.
Cloud Security
Less than ten minutes driving west from my home, you encounter a vast expanse of large, windowless buildings. Situated near them are impressive physical...
Cloud Security
We in the security industry have gotten into a bad habit of focusing the majority of our attention and marketing dollars on raising awareness...
Cloud Security
SecurityWeek and Palo Alto Networks will host a live network security webinar on Wednesday, July 27th at 1:00PM ET: Five Steps to a Secure Hybrid...
Cloud Security
The Xen Project has released patches for two vulnerabilities, including a serious issue that could allow an attacker to escape the guest virtual machine.
Cloud Security
SecurityWeek and Palo Alto Networks will host a live network security webinar on Wednesday, July 27th at 1:00PM ET: Five Steps to a Secure Hybrid...
Cloud Security
Microsoft is strengthening its grip on the cloud with two major new announcements this week. The first is that the Azure Security Center is...
Cloud Security
Cisco has announced its intention to acquire CloudLock Inc, a privately held cloud access security broker (CASB) based in Waltham, Massachusetts. Cisco will pay...
Cloud Security
Microsoft to Solve Document Cloud Compliance and Visibility Issues With Azure Information Protection
Cloud Security
VMware has released updates for some of its products to address several vulnerabilities, including an information disclosure issue rated critical.
Cloud Security
Think of Microsoft and you think of Satya Nadella. Think of Google and you think of, well, who? While Microsoft has a single guiding...
Cloud Security
Microsoft CEO Satya Nadella's transformation of the company from a staid desktop sales company into a dynamic cloud subscription company has been remarkable. By...
Cloud Security
Google has paid out $5,000 to a bug bounty hunter who discovered a serious vulnerability in the Google Cloud Platform.Germany-based researcher Patrik Fehrenbach discovered...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)