Identity & Access
Recent reports of a newly detected Smoke Loader infection campaign and the re-emergence of Magecart-based cyber-attacks illustrate a common tactic used by cyber criminals...
Hi, what are you looking for?
SecurityWeek
CISO Strategy
All enterprises conduct security awareness training for their employees. But whether this has tangible benefits is debatable.
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Cybersecurity Funding
Team8, Index Ventures, Picture Capital, Elad Gil, Cerca Partners, and Tesonet invested in Frame Security.
Cybersecurity Funding
The startup will invest in expanding its training categories, optimizing video generation, and growing its partnership ecosystem.
Cybercrime
The U.S. Justice Department’s Cyber-Digital Task Force made public its first report on Thursday, covering the threat to elections, cybercrime schemes, and various other...
Incident Response
Purple Teaming is a Boon to Incident Readiness and Response
Management & Strategy
While the Gender Bias in Professions Remains Strong, There Are Indications That Factors Beyond Genuine Aptitude Are at Play
Training & Awareness
Security professionals looking to demonstrate and validate their knowledge of how to secure the Amazon Web Services (AWS) platform can now do so by...
Application Security
Team collaboration solutions provider Slack last week announced that one of the secure development lifecycle (SDL) tools used internally by the company has been...
Cyberwarfare
More than 1,000 experts from nearly 30 countries have tested their ability to protect IT systems and critical infrastructure networks at NATO’s Locked Shields...
Cybersecurity Funding
M&A Tracker
Thirty-five percent of CISOs in the financial sector consider staff training to be the top priority for cyber defense. Twenty-five percent prioritize infrastructure upgrades...
Email Security
The employees of insurance companies and non-profit organizations are most likely to fall for phishing attacks, according to a study conducted by security awareness...
Compliance
A majority of physicians in the United States have experienced a cybersecurity incident, and many are very concerned about the potential impact of a...
Compliance
DigiCert has addressed the concerns raised by Mozilla and others regarding the company’s acquisition of Symantec’s certificate business after some web browser vendors announced...
Endpoint Security
Endpoint and network security solutions provider Webroot announced on Tuesday that it has acquired Securecast, an Oregon-based company that specializes in security awareness training....
Training & Awareness
NIST Proposes Ways for Organizations to Improve How to Identify, Recruit, Develop, and Retain Cybersecurity Talent
Incident Response
When summer fully upon us, we in the security profession need to make sure the change in season doesn’t create additional vulnerabilities.
Training & Awareness
As teams work to shore up their incident response procedures, both sophisticated cyber war games and simple rehearsals will be essential tools for their...
Risk Management
Change Two to the National Industrial Security Program Operating Manual (NISPOM 2) came into force at the end of May 2017. One of the...
Training & Awareness
Let’s face it – today’s Generation-Z kids think differently than their Millennial predecessors, who think differently from me, a Baby-Boomer. Gen-Z kids (Americans born...
Incident Response
An ISACA survey released during RSA week sought to illustrate the state of cyber security workforce development and its current trends. The results would...
Training & Awareness
The cyber security skills gap is known and documented, and empirically understood by all enterprise security leaders. It was recently quantified by job site Indeed.com,...
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)