Government
A group of 40 state attorneys general have sent a letter to Meta expressing concern over Facebook and Instagram account takeovers.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Government
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
Data Breaches
The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.
Government
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Government
Credentials stored on Ivanti VPN appliances impacted by recent vulnerabilities are likely compromised, government agencies say.
Government
A coming White House Executive Order seeks to protect personal information by preventing the mass transfer of Americans' sensitive data to countries of concern.
Government
The US has restricted trade with Canadian company Sandvine for aiding the Egyptian government’s web monitoring operations.
Government
White House calls for the “timely, complete, and consistent” publication of CVE and CWE data to help solve the security metrics problem.
Cybersecurity Funding
The US government makes a $45 million investment in 16 projects to improve cybersecurity across the energy sector.
Government
NIST releases Cybersecurity Framework 2.0, the first major update since the creation of the CSF a decade ago.
Government
CISA, FBI and EPA release guidance on how Water and Wastewater Systems Sector entities can secure their environments.
Government
A new Biden executive order to boost the cybersecurity of US ports highlights the risks associated with the use of Chinese cranes.
Government
NSA says Rob Joyce is retiring as cybersecurity director and will be replaced by David Luber, the current deputy director of cybersecurity.
Government
A threat actor employed the administrative credentials of a former employee to hack a US government organization.
Artificial Intelligence
A congressional investigation finds that US venture capital firms invested billions in Chinese technology companies in semiconductor, AI and cybersecurity, sectors that are a...
Government
CISA launched a program aimed at boosting election security, shoring up support for local offices and hoping to provide reassurance to voters that elections...
Artificial Intelligence
The Biden administration named Elizabeth Kelly as the director of the newly established safety institute for artificial intelligence.
Government
More than 60 of the Adobe, Google, Android, Microsoft, Mozilla and Apple zero-days that have come to light since 2016 attributed to spyware vendors.
Cyberwarfare
General Timothy D. Haugh assumed command of NSA and USCYBERCOM on February 2, 2024, taking over the role from General Paul M. Nakasone.
Government
President Biden would veto Republican lawmakers’ attempt to overturn the SEC’s recent cyber incident disclosure rules.
Government
Former CIA software engineer sentenced to 40 years in prison for biggest theft of classified information in CIA history and for possession of child...
Cybercrime
US Treasury Department announces sanctions against two Egyptian nationals accused of running an ISIS cyber platform.
Government
New bipartisan, bicameral legislation aims to improve cybersecurity protections within the food and agriculture sector.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)