Data Protection
British lawmakers issued a scathing report Monday that calls for tougher rules to keep Facebook and other tech firms from acting like "digital gangsters"...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Compliance
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.
Data Protection
Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Data Protection
Network-attached Storage (NAS) device maker QNAP has published a security advisory to alert of malware targeting its NAS devices.
Data Protection
More than 5 billion records were exposed last year through 6,515 publicly disclosed data breaches, according to a new report from Risk Based Security.
Audits
A team of researchers has demonstrated that Intel’s SGX technology can be abused to hide an advanced and stealthy piece of malware that could...
Application Security
The Swiss government last week announced the launch of a public bug bounty program for its electronic voting systems, with rewards of up to...
Compliance
Facebook users should be asked for consent before data collected by the group's subsidiaries Whatsapp and Instagram and on third-party websites is combined with...
Compliance
There have been more than 59,000 personal data breaches reported to European data protection regulators in the first eight months following the enforcement of...
Data Protection
The check-in links sent to customers by several major airlines from around the world can allow hackers to obtain passengers’ personal information and possibly...
Cybercrime
Home remodeling and design platform Houzz informed customers this week of a data breach that involved some personal information.
Data Protection
The State Bank of India is the latest large organization to leave a database full of personal information exposed and accessible on the internet.
Application Security
Fortanix, a California-based company that specializes in encrypting data and applications, on Wednesday announced that it raised $23 million in a Series B funding...
Data Protection
nCipher re-emerged from Thales as a separate stand-alone company manufacturing and marketing hardware security modules (HSMs) on January 7, 2019, and was officially launched...
Compliance
More than 95,000 complaints have been filed with EU countries since the bloc's flagship data protection laws took effect eight months ago, the executive...
Compliance
Companies that are ready for the EU’s General Data Protection Regulation (GDPR) have reported shorter sales delays and fewer or less serious data breaches,...
Compliance
Google said Wednesday it would appeal a record 50-million-euro fine imposed by France's data regulator for failing to meet the EU's strict new General...
Cloud Security
Amazon Web Services (AWS) on Wednesday announced the launch of Amazon WorkLink, a service that enables organizations to provide employees easy and secure access...
Compliance
Russia's media watchdog Roskomnadzor launched "administrative proceedings" Monday against US social media giants Facebook and Twitter, accusing them of not complying with Russian law,...
Data Protection
The developers of the popular open source video player VLC, which recently surpassed 3 billion downloads, have responded to criticism over the use of...
Audits
The Payment Card Industry Security Standards Council (PCI SSC) this week announced new security standards for the design, development and maintenance of payment software.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)