Endpoint Security
A Chrome 85 update released by Google this week patches several high-severity vulnerabilities, including ones that can be exploited to hack users by convincing...
Hi, what are you looking for?
SecurityWeek
Data Protection
Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls.
Endpoint Security
Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel
Data Protection
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
Endpoint Security
Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.
Data Protection
Someone has leaked what appear to be source code files for the Windows XP and Windows Server 2003 operating systems
Endpoint Security
CrowdStrike (Nasdaq: CRWD) on Wednesday announced that it has agreed to acquire Preempt Security, a provider of Zero Trust and access control technology, in...
Cloud Security
Microsoft announced on Tuesday at its Ignite 2020 conference that it has extended its threat protection portfolio and it has unified some of its...
Cloud Security
Kognos emerged from stealth mode on Tuesday with an extended detection and response (XDR) platform that the company says leverages artificial intelligence to enable...
Endpoint Security
The National Security Agency (NSA) has published two cybersecurity information sheets (CSIs) with recommendations for National Security System (NSS) and Department of Defense (DoD)...
Endpoint Security
Google this week announced improved malware protection capabilities for all users who are enrolled in its Advanced Protection Program.
Endpoint Security
The United States National Security Agency (NSA) this week published guidance on how the Unified Extensible Firmware Interface (UEFI) Secure Boot feature can be...
Cybersecurity Funding
AffirmLogic, a company that uses behavior analysis to detect malware, this week announced that it has closed a $25 million equity financing round, which...
Endpoint Security
Microsoft informed administrators on Monday that Application Guard for Office, a feature designed to protect users against malicious documents, is now available in public...
Endpoint Security
Microsoft this week announced a new feature in Microsoft Defender Advanced Threat Protection (ATP) that is designed to block and contain malicious behavior.
Cybercrime
The actively exploited Windows spoofing vulnerability patched last week by Microsoft has been known for more than two years, researchers pointed out.
Endpoint Security
Google announced on Wednesday that it’s preparing to run an experiment in Chrome 86 as part of its fight against URL spoofing.
Black Hat
The first entirely virtual edition of the Black Hat cybersecurity conference took place last week and researchers from tens of organizations presented the results...
Endpoint Security
Researchers revealed late on Thursday that the mitigations and patches rolled out in 2018 for the Foreshadow vulnerabilities affecting Intel processors can fail to...
Endpoint Security
A researcher found a way to deliver malware to macOS systems using a Microsoft Office document containing macro code. The victim simply has to...
Endpoint Security
Google Project Zero last week released a report on the vulnerabilities exploited in attacks in 2019, and its researchers have drawn some interesting conclusions...
Endpoint Security
It appears that the patches released for Linux distributions in response to the GRUB2 bootloader vulnerability are causing problems for many users, making their...
Endpoint Security
Companies affected by the recently disclosed GRUB2 bootloader vulnerability dubbed BootHole have started releasing advisories to inform customers about the impact of the issue...
Endpoint Security
The US Cybersecurity and Infrastructure Security Agency (CISA) has instructed government agencies to immediately address a vulnerability affecting Windows DNS servers.
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)