Cybersecurity Funding
Zero trust endpoint security company ThreatLocker has announced a $115 million Series D funding round that brings the total to $240 million.
Hi, what are you looking for?
SecurityWeek
Endpoint Security
Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product.
Endpoint Security
Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.
Cybersecurity Funding
The company was previously valued at $1.6 billion, and the latest raise has significantly increased that valuation.
Endpoint Security
Apple announced that dozens of vulnerabilities have been patched in each of its operating systems.
Endpoint Security
Vulnerabilities in Palo Alto Networks Cortex XDR allowed a security researcher to turn it into a malicious offensive tool.
Endpoint Security
VUSec researchers resurrect Spectre v2 attack, showing that it works against the Linux kernel on the latest-generation Intel CPUs.
Endpoint Security
A new Rowhammer attack named ZenHammer has been demonstrated against DRAM on systems with AMD CPUs, including DDR5.
Endpoint Security
Intel and AMD publish 10 new security advisories this Patch Tuesday to inform customers about vulnerabilities impacting their products.
Endpoint Security
CPU makers Intel, AMD, Arm and IBM, as well as software vendors, are impacted by a new speculative race condition (SRC) attack named GhostRace.
Endpoint Security
Fresh off its $69 billion acquisition of VMware, Broadcom creates an Enterprise Security Group unit that merges Symantec and Carbon Black.
Endpoint Security
An upgraded ESC security chip makes the firmware of several HP business PCs resilient to quantum computer attacks.
Endpoint Security
When evaluating XDR, consider its value based on its ability to reduce complexity and improve threat detection and response times.
Endpoint Security
Intel announces new and improved security features with the latest vPro platform and Core Ultra processors.
Endpoint Security
AMD and Intel patch dozens of vulnerabilities on February 2024 Patch Tuesday, including multiple high-severity bugs.
Endpoint Security
Palo Alto Networks completed the acquisition of Talon Cyber Security, an Israeli startup selling a secure browser technology to enterprise customers.
Endpoint Security
ESET has patched CVE-2023-5594, a high-severity vulnerability that can cause a browser to trust websites that should not be trusted.
Endpoint Security
Pool Party is a new set of eight Windows process injection techniques that evade endpoint detection and response solutions.
Endpoint Security
Security features that major CPU vendors plan on integrating into their future products can increase the surface for certain types of attacks.
Endpoint Security
LogoFAIL is an UEFI image parser attack allowing hackers to compromise consumer and enterprise devices using malicious logo images.
Endpoint Security
Apple's security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1.
Data Protection
Three critical vulnerabilities in ownCloud could lead to sensitive information disclosure and authentication and validation bypass.
Endpoint Security
Researchers have tested the fingerprint sensors used for Windows Hello on three popular laptops and managed to bypass them.
Endpoint Security
Intel and AMD have informed their customers about a total of more than 130 vulnerabilities found in their products.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)