Data Protection
Many organizations use hundreds or even thousands of third party vendors. They connect to their networks, access private corporate data, and too often, as...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Compliance
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.
Data Protection
Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Data Protection
Blockchain is variously described as the future of computing or a hype bubble that has already burst, depending on which author you read.
Data Protection
Hackers have managed to steal information associated with more than 43 million accounts belonging to customers of Weebly, a San Francisco-based web hosting service...
Data Protection
A recently conducted security assessment of VeraCrypt has revealed over 25 security vulnerabilities in the popular encryption platform, including a critical cryptography flaw.
Data Protection
The Department of Justice announced on Wednesday that a government contractor resident in Maryland with a top secret national security clearance was arrested in...
Data Protection
The hacker calling himself Guccifer 2.0 leaked hundreds of megabytes of files allegedly stolen from the Clinton Foundation, but the organization’s representatives said there...
Data Protection
Researchers at vulnerability management services provider Digital Defense have identified a total of six flaws in the administration interface of EMC VMAX enterprise storage...
Data Protection
With everything moving to the cloud, it is little surprise that Disaster Recovery (DR) is now also offered as cloud-based DRaaS. The majority of...
Data Protection
The OpenSSL Project announced on Thursday that more than a dozen vulnerabilities have been patched in OpenSSL with the release of versions 1.1.0a, 1.0.2i...
Data Protection
The OpenSSL Project announced on Monday that it will soon release updates that patch several vulnerabilities, including one rated as having “high” severity.
Data Protection
A vulnerability related to certificate pinning allows sophisticated threat actors to compromise the systems of Tor Browser and Firefox users via man-in-the-middle (MitM) attacks...
Data Protection
The hacker group calling itself Fancy Bears has leaked another batch of athlete medical records stolen from the systems of the World Anti-Doping Agency...
Data Protection
Hackers have stolen the details of 6.6 million users after breaching the systems of ClixSense, a service that pays people to view ads and...
Data Protection
More than 320,000 financial records have been leaked, and while the information appears to have been stolen either from payment processor BlueSnap or its...
Data Protection
A hacker who over the past weeks leaked tens of millions of accounts stolen from various popular services has now revealed that the Russian...
Data Protection
Hackers stole the details of nearly 100 million users from the Russian web portal Rambler in an attack that took place several years ago.
Data Protection
Hackers breached the systems of Canada-based point-of-sale (PoS) software provider Lightspeed and managed to gain access to customer information.
Data Protection
The account details of well over 43 million Last.fm users were stolen when the online music service was hacked back in 2012.
Data Protection
Identity management firm OneLogin informed customers on Tuesday that some of the information they stored on the company’s servers may have been accessed by...
Join this live webinar for a practical framework for evolving your AI security program from a single application to an enterprise AI ecosystem and autonomous agents.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)