Application Security
Researchers announced this week the launch of a crowdfunding initiative whose goal was to raise money to subscribe to the Shadow Brokers’ monthly exploit...
Hi, what are you looking for?
SecurityWeek
Compliance
(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of...
Artificial Intelligence
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and...
Compliance
Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI.
Compliance
A new CMMC review and reform task force will conduct a comprehensive review of the program.
Audits
Many manufacturers and healthcare delivery organizations (HDO) are concerned about medical device attacks, but only few have taken significant steps to address the threat,...
Compliance
GDPR Roundup: New Products, Surveys and Industry Commentary
Compliance
The European General Data Protection Regulation will take effect in exactly one year from today. It will affect any company that does business with...
Compliance
U.S. retail giant Target has entered a settlement with the Attorneys General of 47 states and it has agreed to pay $18.5 million over...
Compliance
Financial services is perhaps the most regulated sector in industry. SEC, FINRA and Gramm-Leach-Bliley are merely the better known of a raft of regulations....
Compliance
U.S. President Donald Trump signed an executive order on Thursday in an effort to improve the protection of federal networks and critical infrastructure against...
Cloud Security
Cloud security startup RedLock emerged from stealth mode on Tuesday with a cloud infrastructure security offering and $12 million in funding from several high...
Compliance
The European General Data Protection Regulation will be in force in just over 12 months: May 25, 2018. This is the date by which...
Audits
Mozilla has shared details about its own position in the debate between Symantec and Google regarding improper issuance of digital certificates. The organization advised...
Compliance
Compliance
The US-based Kantara Initiative announced today that it has joined the European Trust Foundation to help its non-EU government and corporate members engage with...
Audits
Google is displeased with the fact that Symantec has failed to ensure that its partners don’t improperly issue digital certificates, which is why the...
Compliance
Home Depot has agreed to pay $25 million to the financial institutions affected by the massive data breach suffered by the retailer in 2014,...
Compliance
Companies in the United States, the United Kingdom and Germany are increasingly interested in taking out cyber insurance, according to a new study commissioned...
Compliance
Harold Thomas Martin III, the former U.S. government contractor arrested last year for theft of classified material, was indicted on Wednesday by a federal...
Compliance
Toxic data is sensitive information that you would rather not retain, but must for the sake of business operations.
Compliance
VMware has released updates for some of its AirWatch Android applications to address a couple of important vulnerabilities related to local data encryption and...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)