Application Security
As IT security practitioners struggle to defend against APTs (Advanced Persistent Threats), a new study by the Ponemon Institute finds malware installed via zero-day...
Hi, what are you looking for?
SecurityWeek
Compliance
(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of...
Artificial Intelligence
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and...
Compliance
Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI.
Compliance
A new CMMC review and reform task force will conduct a comprehensive review of the program.
Application Security
Cloud Security
CloudLock Expands Security and Compliance Solution to Salesforce CloudLock, a provider of cloud information security solutions, this week announced that it has extended its...
Application Security
Cigital on Wednesday announced the fifth major release of the of the Building Security In Maturity Model (BSIMM) study, which collected data from 67...
Compliance
Anyone who does business in the cloud knows that compliance standards are a mandatory and often complicated part of the game. Yet getting and...
Compliance
Dome9, a provider of cloud security management tools, has released a new tool that allows Amazon Web Services (AWS) users to visualize their security...
Compliance
Trustwave has launched a new subscription-based, penetration testing service that lets businesses schedule, manage and adjust penetration tests through a cloud-based portal.
Compliance
Just 40 Percent of Federal Cyber Security Professionals are Confident in their Agency’s Security
Cloud Security
New Features in HyTrust Appliance 3.5 Help Reduce Operational Risk in Multi-Tenant Private Clouds
Compliance
McAfee and global research and advisory firm IHL Group released a report examining how retailers are reacting to the challenges of managing and protecting...
Audits
PCI Security Standards Council Shares Expected Changes to PCI DSS and PA-DSS
Compliance
CSC, a global information technology services and solutions provider, announced expansions to its managed security services this week, saying it now offers a solution...
Audits
BeyondTrust has released a free tool designed to give organizations the ability to track and understand configuration changes and administrative activities for security and...
Compliance
Security response personnel at Stanford University are investigating a security breach that may have exposed sensitive information of users of Stanford University Network (SUNet)...
Compliance
Who is a privacy professional’s BFF (best friend forever)? Is it the CFO or the General Counsel (GC)?
Cloud Security
HyTrust, a provider of policy management and access control solutions for virtual and cloud environments, has entered into a strategic investment and technology development agreement with...
Cloud Security
In the era of the public cloud, when employees (aka insiders) are frequently using consumerized applications such as Dropbox, Box and Google Drive to...
Compliance
Well, it is probably not quite game-changing yet, or people would be talking about it more. But the Omnibus Rule (PDF) that updated the Health...
Compliance
Tripwire, a provider of security risk and compliance management tools, this week launched its NERC Solution Suite, a combination of customized tools and services...
Application Security
Microsoft's coding practices and methodology complies with an international standard for developing secure software, the company said Tuesday.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)