Compliance
A government organization in Rhode Island announced on Wednesday that it has filed a lawsuit against Google’s parent company, Alphabet Inc., over the recent...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Compliance
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.
Data Protection
Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Data Protection
Misconfigured databases with poor or absent access controls on both cloud and in-house servers is a known and common problem. Where these databases are...
Data Protection
WASHINGTON (AP) — Google's CEO faces a grilling from U.S. lawmakers on how the web search giant handled an alarming data breach and whether...
Compliance
A new class action filed against Marriott following the massive data breach alleges that the hotel giant’s systems are affected by a serious vulnerability...
Data Protection
Facebook chief Mark Zuckerberg pushed back Wednesday against emails showing the social media giant offering Netflix and other popular apps preferential access to people's...
Cybercrime
Thousands of emails were stolen from aides to the National Republican Congressional Committee during the 2018 midterm campaign, a major breach exposing vulnerabilities that...
Data Protection
The popular question-and-answer website Quora informed users on Monday that their information may have been stolen after someone gained unauthorized access to its systems.
Cyber Insurance
Knowing the True Value of Data Assets Will Improve Cyber Security and Promote Meaningful Cyber InsuranceUnderstanding the value of corporate assets is fundamental to...
Compliance
Several lawsuits have been filed against Marriott International shortly after the hotel giant disclosed a data breach impacting as many as 500 million customers.
Data Protection
Personal information of over 82 million users in the United States was exposed via a set of open Elasticsearch instances, Hacken security researchers warn.
Compliance
Seven European consumer groups filed complaints against Google with national regulators Tuesday, accusing the internet giant of covertly tracking users' movements in violation of...
Cybercrime
Hospital network Atrium Health informed patients on Tuesday that their personal information was compromised following a breach at technology solutions provider AccuDoc.
Application Security
The United States Postal Service (USPS) has fixed an API flaw that potentially exposed data on 60 million customers. A researcher reported the flaw...
Cybercrime
Australia-based HR software provider PageUp recently shared another update on the data breach disclosed earlier this year. The company says it has found no...
Data Protection
Amazon informed some customers this week that their name and email address were exposed due to a “technical error,” but the company provided very...
Cybercrime
Software company OSIsoft recently warned employees, interns, consultants and contractors that all domain accounts have likely been compromised as a result of a data...
Cloud Security
Amazon announced this week that a new feature designed to prevent data leaks has been added to Amazon Web Services (AWS).
Cybersecurity Funding
Cognigo, a Tel Aviv, Israel-based startup focused on data protection and compliance, this week announced that it has completed an $8.5 million Series A...
Data Protection
After security researchers discovered vulnerabilities in the encryption mechanism of several types of solid-state drives (SSDs), Microsoft decided to explain how one can enforce...
Cloud Security
One of the new technologies announced on Tuesday by VMware at its VMworld 2018 Europe conference is VMware Blockchain, which aims to provide enterprises...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)