Cybercrime
More than 15 billion username and password pairs have been offered on cybercrime marketplaces, including over 5 billion unique credentials, according to a report...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Compliance
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.
Data Protection
Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Compliance
A federal judge on Tuesday rejected a challenge by internet service providers and upheld Maine’s “opt-in” web privacy law, one of the strictest in...
Cybercrime
Renewable energy company EDP Renewables North America (EDPR NA) has started informing customers that its internal systems were breached by cybercriminals.
Data Protection
A US Senate panel Thursday approved legislation aimed at combatting online child exploitation as civil liberties activists warned the measure could lead to an...
Compliance
Back in March as the coronavirus pandemic gathered steam in the U.S., a largely unheralded video-conferencing service suddenly found itself in the spotlight.
Data Protection
An Elasticsearch database pertaining to e-learning platform OneClass was found to expose data on over one million students and lecturers, vpnMentor reveals.
Compliance
Republican senators have introduced what they have described as a “balanced” bill that would require technology companies to give law enforcement agencies access to...
Compliance
A top German court on Tuesday ordered Facebook to stop merging data collected through its Whatsapp and Instagram subsidiaries or other websites unless users...
Compliance
Microsoft president Brad Smith on Tuesday said Europe was the global leader on setting rules for big tech, two years after the EU implemented...
Data Protection
Twitter has started informing business customers that their billing information may have been exposed in what the company has described as a “data security...
Data Protection
The United States is taking additional steps toward serving .gov domains over encrypted connections, and this week laid out plans to preload the entire...
Application Security
Apple kicked off its 2020 Worldwide Developers Conference (WWDC) on Monday — a virtual event due to the current coronavirus pandemic — and announced...
Cybercrime
Hundreds of thousands of files belonging to more than 200 law enforcement organizations across the United States have been leaked online after they were...
Compliance
France's highest administrative authority on Friday dismissed a challenge by Google against a fine of 50 million euros ($56 million) for failing to provide...
Data Protection
Zoom announced on Wednesday that it has decided to offer end-to-end encryption to free users after all, as long as they verify their account...
Cloud Security
Cloud native data security platform Open Raven this week announced that it has closed a $15 million Series A funding, which brings the total...
Data Protection
Senator Ron Wyden has raised concerns about the ability of U.S. intelligence agencies to protect what he describes as “some of the nation’s most...
Data Protection
A group of security researchers has devised a new technique for eavesdropping on conversations that relies on the analysis of a light bulb’s frequency...
Compliance
United States House representatives last week sent a letter to Zoom to demand explanation for the communication platform’s decision to close the accounts of...
Cybersecurity Funding
jSonar, a company that provides database security solutions, on Tuesday announced that it raised $50 million from Goldman Sachs.This growth round is jSonar's first...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)