Application Security
Jenkins over the weekend announced that hackers managed to gain access to one of its servers after exploiting a critical vulnerability affecting Atlassian Confluence...
Hi, what are you looking for?
SecurityWeek
Endpoint Security
Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product.
Endpoint Security
Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.
Cybersecurity Funding
The company was previously valued at $1.6 billion, and the latest raise has significantly increased that valuation.
Endpoint Security
Apple announced that dozens of vulnerabilities have been patched in each of its operating systems.
Application Security
Microsoft’s embattled security response unit is scrambling to deal with another zero-day attack hitting users of its flagship Microsoft Office software suite.
Application Security
Social media giant Facebook on Thursday announced a new payout guideline to help vulnerability hunters better understand its bounty decisions related to given bugs.
Application Security
Software vendor SolarWinds failed to enable an anti-exploit mitigation available since the launch of Windows Vista 15 years ago, an oversight that made it...
Application Security
Network detection and response play Corelight has raised a fresh $75 million funding round to speed up its global expansion ambitions.The San Francisco-based Corelight...
Application Security
The Singapore Government Technology Agency (GovTech) on Tuesday introduced a new Vulnerability Rewards Programme (VRP) on HackerOne that offers bug bounty rewards of up...
Endpoint Security
When looking to secure online applications and protect them from fraud, enterprises have traditionally turned to preventative and detective controls on the server side....
Application Security
Israeli security giant Check Point Software Technologies has joined the cybersecurity shopping spree with Monday’s announcement of a deal to purchase Avanan, a startup...
Application Security
The financially-motivated threat actor tracked as FIN8 has added a potent new backdoor to its arsenal and is already using it in attacks in-the-wild,...
Endpoint Security
As adversaries have shifted the focus of attacks to achieve their goals, defenders must evolve their approach to threat detection
Cloud Security
Search software giant Elastic NV is continuing its march into the cybersecurity business with Monday’s announcement of plans to acquire build.security, a red-hot Israeli...
Application Security
Japanese cryptocurrency exchange Liquid on Thursday announced it fell victim to an attack that resulted in large amounts of crypto-currency assets being stolen.Liquid announced...
Application Security
Cisco this week published information on a critical code execution vulnerability affecting its small business RV110W, RV130, RV130W, and RV215W routers, but cautioned that...
Application Security
Over the past several months, an Iran-linked threat actor tracked as Hexane has attempted to breach numerous Israeli organizations using supply chain tools, according...
Application Security
Adobe has issued a warning for a pair of major security vulnerabilities affecting its popular Photoshop image manipulation software.The flaws, rated critical, expose both...
Application Security
Colonial Pipeline has started sending out notification letters to inform more than 5000 people that their personal information was compromised in a ransomware attack...
Application Security
Security vendor Trend Micro has issued a warning for in-the-wild zero-day attacks hitting customers using its Apex One and Apex One as a Service...
Application Security
Exasperated Windows fleet administrators woke up Thursday to news of a new, unpatched Print Spooler vulnerability that leaves machines exposed to remote code execution...
Endpoint Security
Endpoint Security
Consumer cybersecurity firms NortonLifeLock (NASDAQ: NLOK) and Prague-based Avast announced on Tuesday that the two firms have agreed to merge in a deal valued...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)