Application Security
When FireEye (now Mandiant) disclosed the SolarWinds breach in December 2020, the security world was forced to accept the reality that given the motivation,...
Hi, what are you looking for?
SecurityWeek
Data Protection
An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users.
Data Protection
Federal agencies are required to transition high-value assets and high-impact systems to use PQC by the end of 2030 and 2031.
Data Protection
Squidbleed, discovered with the aid of Claude Mythos Preview, has been described as a Heartbleed-style vulnerability.
Artificial Intelligence
The AI Risk Quadrant evaluates AI agents based on three factors: how vulnerable they are to compromise, the potential impact of a breach, and...
Cyber Insurance
Quantum cybersecurity solutions provider QuintessenceLabs this week announced that it has raised A$25 million (roughly US$18.8 million) in a Series B funding round. To...
Application Security
Adobe on Tuesday released a slew of urgent patches with fixes for more than 90 documented vulnerabilities that expose Windows, macOS and Linux users...
Application Security
A new product seeks to solve the two primary security issues that come with moving to the cloud: the danger of accidental misconfigurations and...
Application Security
The open-source Mozilla Foundation says it blocked a series of malicious Firefox add-ons that misused the proxy API that extensions use to proxy web...
Application Security
A security researcher at CyberArk was able to easily break more than 70 percent of Wi-Fi passwords he sniffed using relatively simple, cheap equipment.
Cybersecurity Funding
Tel Aviv, Israel-based Piiano emerged from stealth mode on Tuesday with $9 million in seed funding and a data engineering solution designed to help...
Application Security
Security responders are scrambling this weekend to assess the damage from crypto-mining malware embedded in an npm package (JavaScript library) that counts close to...
Application Security
The global fight against ransomware took a new twist this week with the United States leading a law enforcement effort to hack back and...
Application Security
Tech giant Microsoft has rolled out new security offering to provide non-profit organizationss with additional security in the event of a nation-state attack.
Data Protection
Microsoft this week announced that organizations can now enable their employees to make one-to-one calls on Teams that are protected by end-to-end encryption.
Application Security
Google has released a new version of its flagship Chrome web browser with patches for a total of 19 vulnerabilities, including 16 reported by...
Cybersecurity Funding
News Analysis: Venture capital investors are pumping millions of dollars into privacy enhancing technology (PET) projects, betting that hardware and software innovation is finally coming...
Application Security
The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) this week published a joint...
Audits
A previously unseen threat actor, likely a nation-state, is targeting various entities in South Asia, with a focus on Afghanistan, according to a warning...
Cyber Insurance
Customer data privacy company Skyflow today announced that it has raised $45 million in Series B funding. Over the past 18 months, the company...
Compliance
Private data sharing solutions provider TripleBlind on Monday announced raising $24 million in an oversubscribed Series A funding round, which brings the total raised...
Audits
The password auditing and recovery tool L0phtCrack is now open source and the project is looking for both maintainers and contributors.First released in 1997,...
Data Protection
Unprotected instances of open source event monitoring solution Prometheus may leak metric and label data to the Internet, software company JFrog warns.
Application Security
At least 130 ransomware families were active in 2020 and in the first half of 2021, according to a recent data analysis from Google’s...
Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.
RegisterThis year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.
RegisterExpert Insights
Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences.
(Steve Durbin)
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.
(Matias Madou)
From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype.
(Joshua Goldfarb)
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
(Danelle Au)
From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI.
(Etay Maor)