Application Security
The urgency to patch gaping security holes in F5 Networks BIG-IP and BIG-IQ products escalated over the weekend after researchers spotted malicious in-the-wild attack...
Hi, what are you looking for?
SecurityWeek
Fraud & Identity Theft
Deceptive apps in Early Access are being used by dishonest developers for their own benefit.
Fraud & Identity Theft
Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.
Fraud & Identity Theft
The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, scams and other forms of digital fraud.
Data Breaches
Hackers recently obtained non-sensitive customer information and other documents from the company.
Cybercrime
The United States sentenced a Russian and a North Macedonian on Friday to prison for their roles in a vast cyber crime operation.
Cloud Security
Social media and advertising giant Facebook today announced that it is now allowing mobile users to secure their accounts with the help of security...
Cybercrime
The FBI this week published its Internet Crime Report for 2020, and the agency said it received nearly 800,000 cybercrime complaints last year, with...
Cybersecurity Funding
Digital identity verification firm Socure this week announced raising $100 million in a Series D funding round.
Cyberwarfare
China-linked cyber-espionage group Mustang Panda is targeting telecommunications companies in Asia, Europe, and the United States for espionage purposes, according to a warning from...
Fraud & Identity Theft
I’ve always enjoyed Adam and Jamie’s approach on the Discovery Channel show MythBusters. One by one, Adam and Jamie have taken commonly held, but...
Application Security
Network and asset discovery provider Rumble this week announced that it has raised $5 million in VC funding. The round was led by Jon...
Cybercrime
Threat Intelligence Firm Recorded Future Buys Company Started by Former Employee in $52 Million Deal
Application Security
For the third time this year, Google has shipped an urgent fix to block in-the-wild zero-day attacks hitting its flagship Chrome browser.
Application Security
Software giant Microsoft Corp. has launched an investigation to determine whether one of its flagship information-sharing programs sprung a leak that led to the...
Cloud Security
Patient data protection provider Tausight this week announced that it has raised $20 million in Series A funding.
Application Security
Application services and network delivery firm F5 on Wednesday announced the release of patches for seven related vulnerabilities in BIG-IP, including four with a...
Application Security
It’s raining patches in the Microsoft Windows ecosystem.
Cloud Security
McAfee is changing owners again as part of a $4 billion all-cash transaction that includes the sale of its enterprise business unit.
Cybercrime
Two Ukrainians charged for their involvement in a network providing cash-out and money laundering services to cybercriminals have been extradited to the United States.
Cloud Security
Thousands of mobile applications expose user data through insecurely implemented cloud containers, according to a new report from security vendor Zimperium.
Application Security
Ride-sharing giant Uber has quietly snapped up veteran security leader Latha Maripuri to be its Chief Information Security Officer (CISO).A formal announcement has not...
Application Security
Application Security
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)