Compliance
Attacks against medical devices and critical health care systems are no longer theoretical. In fact, according to a report from the SANS Institute, poorly...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Compliance
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.
Data Protection
Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
Don’t Assume Systems Are Secure Because They are Running Linux - Administrators Must Make Them Secure.
Application Security
I recently attended an online webcast on "defense in depth." The presenter alternated the term with the catchphrase "layered approach." Of course, I was...
Cloud Security
CloudLock, a Waltham, Massachusetts-based firm that helps companies secure data stored in the cloud, announced the launch of CloudLock Selective Encryption, a new cloud-based...
Data Protection
CrowdStrike, a provider of security solutions for identifying advanced threats and targeted attacks, announced the availability of Endpoint Activity Monitoring (EAM), an application on...
Data Protection
McAfee has shared details on a soon to be released threat sharing platform designed to help security teams develop and customize a threat intelligence...
Data Protection
Researchers from Adallom, a SaaS security company founded in 2012, say they recently discovered an unusual variant of the Zeus Trojan that targets Salesforce.com...
Application Security
Krak des Chevaliers was one of the most dominant castles in medieval Syria. In 1271, it was breached when attackers found its weakness: a...
Data Protection
While Security Monitoring Generates Big Data, in its Raw Form it Remains Only a Means to an End...
Data Protection
Locked doors can keep out burglars, but any homeowner knows that misplaced keys can be a headache.
Data Protection
Recently, one of my co-workers walked into my office and informed me of a problem that required attention. It was a tricky problem; one...
Cloud Security
Imperva, a provider of enterprise data security solutions, on Thursday announced its plans to acquire two security firms and assets from another, in a...
Cloud Security
Don’t Reject Cloud Technology Out of Unfounded Fears...
Data Protection
Data Protection
Attack Exposes 405,000 Individuals at Texas Health Care Provider
Data Protection
Vulnerability disclosure can be a thorny issue in the world of security – something recently demonstrated in a dispute about security bugs hiding in...
Data Protection
Think About Survivability and Design Your Network for Resilience as Threats Change...
Data Protection
NEW YORK - Companies need to start thinking of themselves as stewards of consumer data and be proactive about data protection, a panel of...
Cloud Security
After experiencing an attack last year that exposed customer accounts and database instances at cloud-based database service MongoHQ, the company on Tuesday said that it...
Data Protection
In response to a spate of cyber attacks targeting retailers nationwide, the Retail Industry Leaders Association (RILA) announced on Monday that it would help...
Join this live webinar for a practical framework for evolving your AI security program from a single application to an enterprise AI ecosystem and autonomous agents.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)