Cloud Security
Microsoft late Tuesday pushed out an emergency patch to cover the Windows ‘PrintNightmare’ security flaw.
Hi, what are you looking for?
SecurityWeek
Data Protection
Beginning February 2027, all newly issued certificates will have a 64-day validity period by default.
Data Protection
Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls.
Data Protection
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Cybercrime
British Airways has settled a class action brought by individuals impacted by the data breach suffered by the company in 2018, but terms of...
Application Security
Hewlett Packard Enterprise announced it has entered into a definitive agreement to acquire cloud data management and protection provider Zerto. The price tag: $374 million...
Cyberwarfare
Theft of U.S. IP is a fundamental part of China’s stated intention to be the world leader in science and technology by 2050
Application Security
An unknown threat actor has compromised the servers of Mongolian certificate authority (CA) MonPass and abused the organization’s website for malware distribution, according to...
Cloud Security
Microsoft late Thursday acknowledged a severe security vulnerability in the Print Spooler utility that ships by default on Windows and warned that the bug...
Audits
Secure Access Service Edge (SASE) provider Versa Networks this week announced it raised $84 million in Series D funding. To date, the company has...
Application Security
The enterprise asset management space just got a bit more crowded with the launch of Sevco Security, an early-stage startup selling a “cloud-native security...
Application Security
Security researchers at Microsoft are flagging multiple gaping security holes in firmware shipped on NETGEAR routers, warning that exploitation could lead to identity theft...
Application Security
IBM Corp. on Wednesday announced that it is contributing the Kestrel open-source programming language for threat hunting to the Open Cybersecurity Alliance (OCA).
Cybersecurity Funding
Healthcare data management provider HealthVerity this week announced that it has raised $100 million in Series D funding, which brings the total raised by...
Application Security
Microsoft is investigating an incident where a threat actor submitted malicious drivers for certification through the Windows Hardware Compatibility Program.Built by a third-party, the...
Cloud Security
Mercedes-Benz USA said last week that sensitive personal information pertaining to its customers was inadvertently exposed by a vendor.
Application Security
Google this week announced a security update for Google Drive that is meant to make sharing links more secure for files stored with the...
Compliance
A Dutch consumer group is launching a 1.5 billion euro ($1.8 billion) claim against TikTok over what it alleges is unlawful harvesting of personal...
Application Security
Security researchers at Eclypsium have figured out a way to exploit a set of high-severity vulnerabilities that expose millions of Dell computers to stealthy...
Application Security
Networking device manufacturer Zyxel has issued an alert to warn customers of attacks targeting a subset of security appliances that have remote management or...
Cloud Security
Anjuna, a provider of cloud application security, today announced that it has raised $30 million in Series B funding, which brings the total raised...
Cybersecurity Funding
California-based data security company Symmetry Systems on Wednesday announced raising $15 million in a Series A funding round.
Audits
A new version of the open-source Tor Browser was released this week with patches for multiple vulnerabilities, including one that could allow malicious websites...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)