Data Protection
A publicly accessible, unprotected database belonging to car dealership marketing firm Dealer Leads was found to expose 198 million records, including personally identifiable information,...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Compliance
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.
Data Protection
Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Data Protection
In an attempt to improve the privacy and security of its users, Google is getting ready to bring DNS-over-HTTPS (DoH) to the Chrome browser.
Data Protection
Researchers have discovered yet another side-channel attack method that can be exploited to steal potentially sensitive data from devices powered by Intel processors.
Data Protection
South Korean-based manufacturer DK-LOK was found to leak internal and external communications, including data on clients, vpnMentor’s researchers warn.An industrial pipe, valve, and fittings...
Compliance
Data protection firm BigID announced on Thursday that it has raised $50 million in a Series C funding round, which brings the total raised...
Data Protection
Phone numbers linked to more than 400 million Facebook accounts were listed online in the latest privacy lapse for the social media giant, US...
Compliance
Google agreed Wednesday to pay $170 million to settle charges that it illegally collected and shared data from children on its YouTube video service,...
Cybercrime
The XKCD forum has been taken offline after suffering a data breach that impacted 562,000 subscribers.The forum is associated with XKCD, a webcomic that...
Cloud Security
California-based cybersecurity firm Imperva revealed on Tuesday that it recently learned of a security incident affecting some customers of its Cloud Web Application Firewall...
Data Protection
Some of the airlines that manage booking systems themselves have failed to implement important protection mechanisms, exposing their customers’ personal information, a researcher has...
Data Protection
The Linux Foundation this week announced an industry-wide effort aimed at accelerating the adoption of confidential computing.
Data Protection
Visa this week announced a new set of capabilities aimed at improving fraud prevention and cybersecurity of payment systems.The new payment security services are...
Data Protection
Apple, Google and Mozilla announced on Wednesday that they have taken action against Kazakhstan’s efforts to spy on its citizens by requiring them to...
Data Protection
Microsoft-owned GitHub on Monday announced that its token scanning service will also check commits for Atlassian, Dropbox, Discord, Proctorio and Pulumi tokens that have...
Data Protection
When it Comes to Data Protection and Privacy, it is Important to Evaluate Where You Are, and Where You Need to Go
Data Protection
Researchers at UK-based threat intelligence firm Cyjax have studied files submitted to three popular online malware analysis sandboxes and found that many of the...
Data Protection
Google has shared some interesting data collected by the company from users of its Password Checkup extension for Chrome.
Data Protection
Yet another database of personal information has been found on an unsecured server. This one stands out for its size, the range of unencrypted...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)