Application Security
Software supply chain security jitters escalated again Friday with new “critical severity” warnings about malware embedded in two npm package managers widely used by...
Hi, what are you looking for?
SecurityWeek
Endpoint Security
Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product.
Endpoint Security
Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.
Cybersecurity Funding
The company was previously valued at $1.6 billion, and the latest raise has significantly increased that valuation.
Endpoint Security
Apple announced that dozens of vulnerabilities have been patched in each of its operating systems.
Application Security
US Goverment Offers $10 Million Reward for Data on Leaders and Members of DarkSide Ransomware Operation
Application Security
Enterprise networking giant Cisco has released patches for multiple vulnerabilities across its product portfolio, including critical security defects in Catalyst Passive Optical Network (PON)...
Application Security
Researchers are calling attention to a newly discovered security defect in a kernel module that ships with all major Linux distributions, warning that remote...
Endpoint Security
Microsoft on Tuesday announced the upcoming availability of Microsoft Defender for Business, an enterprise-grade endpoint security solution catered for small and medium-sized businesses (SMBs).
Application Security
The Federal Bureau of Investigation (FBI) this week issued an industry-wide notification to raise awareness about ransomware operators leveraging information on mergers, acquisitions and...
Application Security
Privacy-focused communication platforms Signal is sharing information on the improvements it has made to its spam-prevention capabilities.The task of keeping spam out of user’s...
Application Security
IBM Security on Tuesday announced plans to acquire ReaQta, an early-stage European startup in the red-hot autonomous threat detection and response business.Financial terms of...
Cybercrime
Microsoft Phishing Messages Come From Kaspersky Email AddressKaspersky published two advisories on Monday to warn customers about a vulnerability that can lead to unbootable...
Application Security
Google is sweetening the pot for bug bounty researchers finding and exploiting privilege escalation flaws in the Linux kernel.Over the next three months, Google...
Data Protection
Zero trust is a conceptual destination, not an application. As with all destinations, there are different routes to it, and even different descriptions of...
Application Security
Malware hunters at Lookout Security have discovered a new Android rooting malware that managed to score tens of thousands of downloads through Google Play...
Application Security
Minnesota-based IT management and software powerhouse HelpSystems expanded its year-long cybersecurity shopping spree with a new deal to acquire data loss prevention specialists Digital...
Endpoint Security
Microsoft on Thursday published information on a vulnerability in Apple’s macOS platform that could allow an attacker to bypass System Integrity Protection (SIP) and...
Application Security
The Federal Bureau of Investigation (FBI) this week released a Flash report to publicly share indicators of compromise (IOCs) for the Ranzy Locker ransomware.
Application Security
A highly-critical vulnerability in a popular open-source CI/CD solution can be exploited to hijack sensitive secrets for downstream supply chain attacks, according to a...
Application Security
Google on Wednesday announced the Minimum Viable Secure Product (MVSP) initiative, partnering with some of tech's biggest names to create a vendor-neutral minimum baseline...
Endpoint Security
An XDR implementation can quickly turn into a very large consulting project requiring significant time and budget
Application Security
The United States Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday announced the appointment of Washington Secretary of State Kim Wyman as its Senior...
Application Security
The North Korea-linked state-sponsored hacking group Lazarus has started to target the IT supply chain in recent attacks, according to cybersecurity firm Kaspersky.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)