Application Security
Israeli startup Opus Security has banked $10 million in seed round funding to build technology for cloud security orchestration and remediation.Opus Security said the...
Hi, what are you looking for?
SecurityWeek
Data Protection
Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls.
Endpoint Security
Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel
Data Protection
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
Endpoint Security
Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.
Application Security
Apple’s security response engine revved into high gear Monday with patches for security defects in a wide range of products, including fixes for a...
Artificial Intelligence
Coming to a global consensus on what makes for ethical AI will be difficult. Ethics is in the eye of the beholder.
Application Security
Microsoft has published an analysis of the ransomware attacks associated with a subgroup of the Iran-linked advanced persistent threat (APT) actor Phosphorus.
Application Security
Multiple Iranian hacking groups participated in a recent cyberattack targeting the Albanian government, according to new data from Microsoft's security research and response teams.
Application Security
Three U.S. government agencies -- Cybersecurity and Information Security Agency (CISA), the National Security Agency (NSA) and the Office of the Director of National...
Application Security
Managed detection and response (MDR) platform provider Huntress on Thursday announced the closing of a $40 million debt financing round to speed up global...
Application Security
Security researchers at Rapid7 are warning about multiple secuirty vulnerabilities impacting Baxter’s Sigma Spectrum infusion pumps, including issues that could lead to the leakage...
Endpoint Security
Security teams need an architecture where disparate systems and sources that talk in different languages and use different formats can communicate
Endpoint Security
Shares in cybersecurity company Darktrace crashed 30 percent Thursday after US private equity firm Thoma Bravo ended its takeover interest in the British group.In...
Application Security
Cymulate, a late-stage Israeli startup in the breach and attack simulation space, has closed a $70 million Series D funding round led by existing...
Application Security
Networking solutions provider Zyxel has released patches for a critical-severity vulnerability impacting the firmware of multiple network attached storage (NAS) device models.
Endpoint Security
Training for multiple situations will help your security team make decisions more quickly
Cybercrime
Let’s get back to summer travel.My original title for this byline was “Hack for the Holidays,” but I decided that my ever-friendly content editor...
Endpoint Security
ndpoint security company McAfee warns of five malicious Chrome extensions designed to track users’ browsing activity and inject code into ecommerce platforms.
Application Security
A group of academic researchers have designed an open source Node.js bug hunting tool that has already identified 180 security vulnerabilities.
Application Security
Atlassian’s security response team has issued an urgent advisory to warn of a critical command injection flaw in its Bitbucket Server and Data Center...
Application Security
Password management software firm LastPass has suffered a data breach that led to the theft of source code and proprietary technical information.
Application Security
BalkanID, a Texas startup building technology in the Identity Governance and Administration (IGA) space, has added $2.3 million to its seed financing round, bringing...
Data Protection
A researcher from the Ben-Gurion University of the Negev in Israel has shown how a threat actor could stealthily exfiltrate data from air-gapped computers...
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)