Data Protection
Data belonging to customers of MBIA Inc., the largest bond insurer in the United States, was inadvertently made available online due to a misconfigured...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Compliance
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.
Data Protection
Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Data Protection
Late last month, Home Depot reported 56 million cardholders were compromised in what The New York Times called the “largest known breach of a...
Data Protection
Securing Apache Hadoop - How Enterprises Can Pass Internal and External Security Requirements and Audits
Cloud Security
Cloud information security company CloudLock has launched a new solution designed to detect, classify and secure sensitive data stored in Google Drive in near...
Cloud Security
The blogosphere was atwitter last week with scintillating details about nude selfies and what you should and shouldn’t be doing with your phone. Blame...
Cloud Security
SAN FRANCISCO - Apple is ramping up iCloud defenses in the aftermath of hackers swiping nude photos of celebrities from the online digital vault,...
Data Protection
Goodwill Industries International revealed on Tuesday that some of its customers' payment cards were compromised after the systems of a third-party vendor became infected...
Cybercrime
Mozilla is warning users who have contributed to testing builds of the online bug-tracking tool Bugzilla that their email addresses and encrypted passwords were...
Data Protection
After being notified by researchers at Sucuri, the developers of the Akeeba backup extension for Joomla fixed a vulnerability that can be leveraged to...
Data Protection
The National Institute of Standards and Technology (NIST) is requesting public comments on a guide designed to help organizations determine potential security and privacy...
Application Security
Researchers at dxw Security have discovered a flaw in the WordPress Mobile Pack plugin that can be exploited to access password-protected posts.
Data Protection
Identifying security gaps is a favorite pastime of security professionals. We lovingly spend time performing risk assessments, drafting and administering policies, implementing defensive technologies,...
Cybercrime
Earlier this week, Community Health Systems, one of the largest hospital operators in the United States, announced that hackers managed to steal the records
Data Protection
Chinese Group Believed Responsible for Community Health Systems Attack That Exposed Personal Information of 4.5 Million PatientsCommunity Health Systems, Inc., one of the largest...
Cybersecurity Funding
Israeli cybersecurity startup GuardiCore, announced on Monday that it has closed an $11 million round of funding led by Battery Ventures.
Data Protection
Pretty Good Privacy (PGP), the popular email privacy and authentication software is fundamentally broken and it's time for it to "die," says Matthew Green,...
Data Protection
The assets of numerous organizations are at risk because their former employees continue to have access to sensitive corporate applications even after they leave...
Join this live webinar for a practical framework for evolving your AI security program from a single application to an enterprise AI ecosystem and autonomous agents.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)