Compliance
American Express has launched a new services designed to protect online and mobile payments by replacing sensitive card information with tokens.
Hi, what are you looking for?
SecurityWeek
Compliance
(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of...
Artificial Intelligence
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and...
Compliance
Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI.
Compliance
A new CMMC review and reform task force will conduct a comprehensive review of the program.
Compliance
The PCI Security Standards Council (PCI SSC) published guidance today aimed at helping businesses build information security awareness programs.
Compliance
The Payment Card Industry (PCI) Security Standards Council has published an information supplement to help organizations that want to achieve or maintain PCI DSS...
Compliance
NEW YORK - In a case closely watched by the tech sector, Microsoft will challenge Thursday a US court order requiring it to give...
Compliance
NEW YORK - Microsoft said Monday it was under investigation by antitrust authorities in China, pledging to cooperate in the investigation. "We aim to...
Compliance
BEIJING - Officials from China's corporate regulator paid visits Monday to software giant Microsoft's offices in four cities in the country, Dow Jones Newswires...
Compliance
UK Travel Company Fined After Hackers Stole Details of 1.1 Million Payment CardsThe United Kingdom's Information Commissioner's Office (ICO) announced on Thursday that a...
Compliance
Businesses that handle payment card data have to become compliant with the Payment Card Industry Data Security Standard 3.0 (PCI DSS 3.0) by December...
Compliance
After discovering that its mobile app was not fully compliant with PCI security standards, identity protection firm LifeLock said on Friday that it has...
Compliance
The National Institute of Standards and Technology (NIST) announced May 14 that its primary advisory committee, the Visiting Committee on Advanced Technology (VCAT), has...
Compliance
The National Institute of Standards and Technology (NIST) announced on Monday that it has removed the Dual_EC_DRBG, or Dual Elliptic Curve Deterministic Random Bit...
Compliance
Toshiba announced on Tuesday that its MQ01ABUxxxBW series hard disk drives (HDD) has achieved validation to U.S. Federal Information Processing Standard 140-2 (FIPS 140-2).
Compliance
Every Time Technology is Used for the Greater Good, We Must Remember There is Also a Group of Malicious Opportunists Waiting to Pounce...
Audits
CloudLock, a Waltham, Massachusetts-based firm that helps companies secure data stored in the cloud, announced the availability of CloudLock Compliance for Google+, a PCI/PII...
Compliance
Attacks against medical devices and critical health care systems are no longer theoretical. In fact, according to a report from the SANS Institute, poorly...
Compliance
According to a recent survey of security and compliance professionals from U.S. government agencies and contractors, a dysfunctional Congress is a creating a signficant...
Audits
CloudLock, a Waltham, Massachusetts-based firm that helps companies secure data stored in the cloud, today announced it has raised $16.5 million in a Series...
Compliance
Since the initial release of PCI-DSS, networks, data centers and threats to cardholder data have continued to evolve, driving further refinement of the standard....
Compliance
Security is a Serious Business Where The Bottom Line is The Only Result that Matters. Focusing on the Negative May Not Sound Fun, But it’s...
Compliance
Last month, the PCI Security Standards Council (PCI SSC) released its proposed changes for the Payment Card Industry Data Security Standard (PCI DSS)
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)