Data Protection
Officials at a St. Louis health center that serves needy, uninsured residents says a cyber-attack has caused a data breach that potentially affected 152,000...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Compliance
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.
Data Protection
Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Cloud Security
Adobe has admitted that some Creative Cloud customer information — 7.5 million records, according to the researchers who stumbled upon the data — was...
Cybersecurity Funding
San Francisco-based data security company Very Good Security (VGS) on Thursday announced that it raised $35 million in a Series B funding round led...
Data Protection
ATLANTA — SECURITYWEEK 2019 ICS CYBER SECURITY CONFERENCE — Outdated and unsupported operating systems are still present and they still pose a serious risk...
Cybercrime
Hackers have leaked private RSA keys and information on configuration files that were stolen from a NordVPN server last year.
Data Protection
The official campaign website of U.S. President Donald Trump exposed information that may have allowed hackers to intercept emails and send out emails on...
Data Protection
Instagram announced this week that users will have more control over the data they share with third-party applications and websites.
Data Protection
Safari does use Tencent to ensure that users in China do not navigate to malicious websites, but it never sends the actual URL of...
Compliance
Turkey’s data protection authority says it has imposed a 1.6 million Turkish lira ($280,000) fine on Facebook for contravening the country’s data laws.
Data Protection
Officials are calling on Facebook not to use encryption in its messaging services that does not provide authorities a way to see what is...
Cybercrime
Customer support company Zendesk revealed on Wednesday that it has become aware of a security incident impacting thousands of accounts activated before November 2016.
Data Protection
Google on Wednesday announced that its Password Checkup tool has been added to the Account password manager, and the company has unveiled some new...
Cybercrime
An American man who leaked confidential details of thousands of HIV-positive people in Singapore, most of them foreigners, has been jailed in the United...
Application Security
Arizona transportation officials announced enhanced security measures Thursday for a state website that identity thieves exploited to get dozens of duplicate driver's licenses.The Arizona...
Data Protection
Apple on Friday released security updates for iOS 13 and iPadOS to address a vulnerability that allowed third-party keyboard extensions to gain “full access”...
Audits
New York Attorney General Letitia James filed a lawsuit against Dunkin' Donuts in the Supreme Court of the State of New York on Thursday,...
Data Protection
Dell on Tuesday unveiled new EMC PowerProtect appliances and announced improvements to existing data protection and recovery products.
Application Security
Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.
Cloud Security
Researchers at vpnMentor have discovered an unprotected database apparently storing information on nearly everyone in Ecuador, including children and deceased individuals.
Data Protection
Millions of Ecuadorians are at risk of identity theft because a security breach exposed a trove of data including names, phone numbers and birth...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)