Cyberwarfare
Trump campaign spokesperson Steven Cheung blamed the hack on “foreign sources hostile to the United States.”
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Government
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
Data Breaches
The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.
Government
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Government
The US is offering up to $10 million for Iranian individuals accused of hacking water utility industrial control systems last year.
Artificial Intelligence
Einstein has led CISA’s AI efforts since 2023 as CISA’s Senior Advisor for AI.
Artificial Intelligence
EU officials say the Artificial Intelligence Act will protect the “fundamental rights” of citizens while also encouraging investment and innovation in the booming AI...
CISO Strategy
SecurityWeek fireside chat: Google Cloud CISO on CISA’s secure-by-design initiatives, government regulations, holding vendors accountable, and transformational security leadership.
Government
The US is offering a reward of up to $10 million for information on Rim Jong Hyok, a member of the North Korean hacking...
Government
Everything about the Kids Online Safety Act (KOSA): who supports it, who opposes it, and its chances of passing in Congress.
Government
US has announced sanctions against two CARR hacktivists for roles in cyberattacks targeting critical infrastructure.
Government
Kaspersky is shutting down operations in the US and laying off employees following the recent Commerce Department ban.
Application Security
CISA says a SILENTSHIELD red team assessment found gaping holes in the security posture of a federal civilian executive branch organization.
Artificial Intelligence
Few people understand AI, nor how to use nor control it, nor where it is going. Yet politicians wish to regulate it.
Government
The Supreme Court's striking down of the Chevron Doctrine will have a major effect on the determination and enforcement of cyber regulation in the...
Artificial Intelligence
Lawmakers voted to advance legislation that would require AI companies to test their systems and add safety measures to prevent them from being potentially...
Government
The US has imposed sanctions on 12 individuals who have leadership roles at Kaspersky in Russia and the UK.
Government
The US government announced a ban on the sale of Kaspersky software over fears that the company is controlled by the Russian government.
Government
Cisco has released a security advisory after researchers discovered that the German government’s Webex meetings were exposed.
Government
Noteworthy stories that might have slipped under the radar: Apple WPS can be abused for surveillance, Canadian government wants backdoors, NIST launches AI program.
Email Security
The email addresses and other information of hundreds of British, French and EU politicians have been found on the dark web.
Government
NIST is receiving support to get the NVD and CVE processing back on track within the next few months.
Government
While reintegration of formerly incarcerated people into the workforce is important, the government should be cautious about what positions those with a criminal history...
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)