Endpoint Security
NEWS ANALYSIS: Redmond plants its feet firmly in the enterprise browser space, sending major ripples through Silicon Valley's bustling venture-backed startup ecosystem.
Hi, what are you looking for?
SecurityWeek
Data Protection
Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls.
Endpoint Security
Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel
Data Protection
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
Endpoint Security
Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.
Endpoint Security
Several major companies have published advisories in response to the Downfall vulnerability affecting Intel CPUs.
Endpoint Security
Several vulnerabilities discovered in Iagona ScrutisWeb ATM fleet monitoring software could be exploited to remotely hack ATMs.
Endpoint Security
Intel has addressed 80 vulnerabilities affecting its products, including 18 high-severity privilege escalation and DoS flaws.
Endpoint Security
Automated Security Control Assessment enhances security posture by verifying proper, consistent configurations of security controls, rather than merely confirming their existence.
Endpoint Security
Researchers have disclosed the details of a new side-channel attack targeting AMD CPUs named Inception.
Endpoint Security
Google researcher discloses the details of an Intel CPU attack method named Downfall that may be remotely exploitable.
Endpoint Security
A new power side-channel attack named Collide+Power can allow an attacker to obtain sensitive information and it works against nearly any modern CPU.
Endpoint Security
AMD has released microcode patches to address Zenbleed, a vulnerability in its Zen 2 CPUs that can allow an attacker to access sensitive information.
Endpoint Security
Two new serious vulnerabilities in AMI BMC, which is used by millions of devices, can allow attackers to take control of systems and cause...
Cybercrime
Microsoft has revoked signed drivers used for post-exploitation activity, in many cases by Chinese cybercriminals.
Endpoint Security
The need for cyber resilience arises from the growing realization that traditional security measures are no longer enough to protect systems, data, and the...
Endpoint Security
Western Digital is blocking access to its cloud services for devices running firmware versions impacted by a critical security vulnerability.
Endpoint Security
CISA and the NSA have published new guidance to help organizations harden baseboard management controllers (BMCs).
Endpoint Security
Microsoft is making SMB signing a default requirement in Windows 11 Enterprise editions, starting with insider preview build 25381.
Endpoint Security
Gigabyte has announced BIOS updates that remove a recently identified backdoor feature in hundreds of its motherboards.
Endpoint Security
A backdoor feature found in hundreds of Gigabyte motherboard models can pose a significant supply chain risk to organizations.
Endpoint Security
Out-of-control devices run the gamut from known to unknown and benign to malicious, and where you draw the line is unique to your organization.
Endpoint Security
Over a nine-month audit, Google researchers identified ten security defects in Intel TDX, including nine vulnerabilities addressed with TDX code changes.
Endpoint Security
Texas startup scores financing to build an AI-powered anti-ransomware engine to help organizations ward off data-extortion attacks.
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)