Application Security
It’s that time of the year again. Time not only to make resolutions (which I fully plan to keep for at least a whole...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Compliance
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.
Data Protection
Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Cybercrime
SEOUL - Tens of thousands of South Koreans flooded banks and call centers Tuesday to cancel credit cards following the unprecedented theft of the...
Data Protection
WASHINGTON - Figuring out where to house mountains of data collected by the National Security Agency is the thorniest challenge the US faces in...
Data Protection
SEOUL - The personal data of at least 20 million bank and credit card users in South Korea has been leaked, state regulators said...
Compliance
Since the initial release of PCI-DSS, networks, data centers and threats to cardholder data have continued to evolve, driving further refinement of the standard....
Data Protection
High-end department store Neiman Marcus is the latest retailer having to come forward and tell customers their data has been accessed by attackers. The...
Data Protection
Target said Friday that its recent data breach affected roughly 70 million customers, significantly more than the 40 million originally estimated. The retail giant...
Data Protection
As organizations search for solutions to protect their networks, data centers, and computer systems, an unexpected threat may be lurking under the surface—senior management.
Data Protection
WASHINGTON - The US National Security Agency is making strides toward building a "quantum computer" that could break nearly any kind of encryption, The...
Compliance
Last month, the PCI Security Standards Council (PCI SSC) released its proposed changes for the Payment Card Industry Data Security Standard (PCI DSS)
Cloud Security
In 2014, Will Your Security Team be Driving New Value, or Responding to Yesterday’s Threats?
Cybercrime
Massive Data Breach Renews Call for Adoption of Chip-based Payment Cards in The United States...
Data Protection
Making Incident Response a Top Priority and Developing a Policy and Process Can Limit The Damage Caused by a Data Breach.
Application Security
In a perfect world, we’d all have strong and different passwords for every site we visit. We know it’s the right thing to do. But...
Data Protection
What can airport security teach us about dealing with insider threats?
Data Protection
Security researchers at Imperva are warning that cyber-criminals are taking advantage of hosted database services to set up command-and-control and drop servers for data...
Data Protection
ATTINGHAUSEN - It looks like the ideal location for a James Bond thriller: a massive underground bunker in a secret location in the Swiss...
Data Protection
“We all want to live in a world that is safe and secure, but we also want to live in a country that is...
Data Protection
Australia Probes Spy Case at Top Science Authority SYDNEY - Australian police and intelligence agencies were Tuesday investigating a suspected industrial espionage case at...
Application Security
Join this live webinar for a practical framework for evolving your AI security program from a single application to an enterprise AI ecosystem and autonomous agents.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)