Compliance
Companies that are ready for the EU’s General Data Protection Regulation (GDPR) have reported shorter sales delays and fewer or less serious data breaches,...
Hi, what are you looking for?
SecurityWeek
Compliance
(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of...
Artificial Intelligence
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and...
Compliance
Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI.
Compliance
A new CMMC review and reform task force will conduct a comprehensive review of the program.
Compliance
Google said Wednesday it would appeal a record 50-million-euro fine imposed by France's data regulator for failing to meet the EU's strict new General...
Audits
The U.S. Department of Homeland Security (DHS) on Tuesday issued an emergency directive instructing federal agencies to prevent and respond to DNS hijacking attacks.
Compliance
Russia's media watchdog Roskomnadzor launched "administrative proceedings" Monday against US social media giants Facebook and Twitter, accusing them of not complying with Russian law,...
Audits
The Payment Card Industry Security Standards Council (PCI SSC) this week announced new security standards for the design, development and maintenance of payment software.
Application Security
Onapsis, a company specializing in cybersecurity and compliance solutions for enterprise resource planning (ERP) products, on Wednesday announced that it has entered a definitive...
Compliance
The number of US government domains for which TLS certificates were left to expire due to the government shutdown has now exceeded 130, UK-based...
Compliance
The founder of Huawei said Tuesday his company would refuse to disclose secrets about its customers and their communication networks, trying to lay to...
Compliance
Many TLS certificates for .gov domains have not been renewed due to the ongoing shutdown of the United States government, making them insecure or...
Compliance
BlackBerry on Monday announced that manufacturers of Internet of Things (IoT) devices can now use the company’s technology to improve the safety and security...
Compliance
The US tech industry is weathering a crisis of confidence over data protection and a difficult geopolitical situation, with record sales expected in 2019,...
Compliance
The United States, United Kingdom, Canada, Australia and New Zealand officially blamed China on Thursday for the cyberattacks launched by a threat group known...
Audits
The U.S. Department of Defense lacks visibility into software inventories, a review of Marine Corps, Navy, and Air Force commands and divisions reveals.
Compliance
Huawei defended its global ambitions and network security on Tuesday in the face of Western fears that the Chinese telecom giant could serve as...
Compliance
Data security solutions provider Egress on Tuesday announced that it has raised $40 million in a Series C funding round led by FTV Capital,...
Compliance
A Czech cyber-security agency on Monday warned against using the software and hardware of China's Huawei and ZTE companies, saying they posed a threat...
Compliance
Germany's IT watchdog has expressed scepticism about calls for a boycott of Chinese telecoms giant Huawei, saying it has seen no evidence the firm...
Application Security
Tigera, a San Francisco-based company that provides security and compliance solutions for Kubernetes platforms, announced on Wednesday that it raised $30 million in a...
Compliance
Protecting Santa’s Workshop...and Payment Card Data
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)