Application Security
Google has shared some data on the adoption of Transport Layer Security (TLS) by Android applications and it seems that significant progress has been...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Compliance
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.
Data Protection
Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Data Protection
RUAG, a Switzerland-based firm that develops and markets civil and military technology applications for use in space, in the air and on land, has announced the...
Audits
The European Commission said Monday it had begun a "preliminary investigation" into how Facebook and Google collect personal data and what they do with...
Data Protection
Twitter and Facebook this week took action against malicious mobile software development kits (SDKs) that were used to improperly access user data.
Cybercrime
T-Mobile informed some prepaid customers this week that their personal information may have been compromised as a result of a hacker attack.
Cybersecurity Funding
Data protection provider Clumio this week announced the completion of a $135 million Series C funding round, which brings the total raised by the...
Data Protection
Amnesty International issued a scathing indictment of the world’s dominant internet corporations, arguing in a new report that Google and Facebook should be forced...
Data Protection
New legislation introduced this week aims to put a stop to the flow of Americans’ sensitive personal data to countries that threaten national security.
Data Protection
The U.S. National Security Agency (NSA) has published an advisory to provide information on possible mitigations for risks associated with Transport Layer Security Inspection...
Data Protection
Microsoft this week revealed plans to adopt DNS over HTTPS (DoH) in Windows 10 in an attempt to keep user traffic as private as...
Compliance
Google on Tuesday defended a project aimed at modernizing healthcare while giving it access to medical data of millions of people.
Compliance
Companies subject to PCI DSS security requirements are audited once per year, yet many of these companies continue to be breached. It is not...
Data Protection
Enterprise information management (EIM) firm OpenText this week announced it has entered a definitive agreement to acquire data protection and cybersecurity provider Carbonite, Inc.
Cybercrime
The forum dedicated to Check Point’s ZoneAlarm security product appears to have been breached and the details of the forum’s members have been leaked...
Data Protection
The allegations of spying by former Twitter employees for Saudi Arabia underscore the risks for Silicon Valley firms holding sensitive data which make the...
Data Protection
Whistleblowers and digital pioneers have long been sounding the alarm about abuses of our privacy online.Now, a slew of tech entrepreneurs are bidding to...
Compliance
Leaked documents from a civil suit against Facebook show how the social network aimed to employ user data as a tool for bargaining and...
Audits
Facebook says that 100 third-party application developers continued to access user information via the Groups API even after access to the data was restricted.
Cloud Security
In addition to new security tools for Azure, at the Ignite 2019 conference this week, Microsoft announced new capabilities aimed at improving the security...
Compliance
Technology has given internet giants "irresistible power" when they work in concert with governments, whistleblower Ed Snowden told the Web Summit that opened in...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)