Government
US government reportedly disabled parts of a botnet-powered cyber campaign conducted by the Chinese threat actor Volt Typhoon.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Government
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
Data Breaches
The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.
Government
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Cybercrime
US, UK and Australia announce sanctions against Alexander Ermakov for his role in the 2022 ransomware attack on healthcare insurer Medibank.
Government
CISA, FBI and EPA document aims to help water and wastewater organizations improve their cyber resilience and incident response.
Government
Organizations can earn up to $3 million in federal funding for cyber tools securing the clean energy infrastructure.
Government
US Department of Energy offering up to $70 million in funding for research into technologies that boost the resilience and security of energy sector.
Compliance
DoD is requesting public opinion on proposed changes to the Cybersecurity Maturity Model Certification program rules.
Cyberwarfare
Hackers, including from Russia and China, launched cyberattacks and collected information, but it did not impact the integrity and security of the 2022 US...
Data Breaches
The SEC has provided some important clarifications on its new cyber incident disclosure requirements, which come into effect on December 18.
Government
CISA is asking for public opinion on SCuBA secure configuration baselines for nine Google Workspace services.
Government
US Senate confirms former CIA and NSA senior executive Harry Coker as next National Cyber Director in the White House ONCD.
Data Breaches
The FBI has issued guidance for SEC data breach reporting requirements and how disclosures can be delayed.
Cyberwarfare
A top White House national security official said recent cyber attacks by Iranian hackers on US water authorities should be seen as a call...
Artificial Intelligence
Researchers have warned that powerful AI models could be used to supercharge online disinformation, cyberattacks or creation of bioweapons.
Application Security
Government agencies in the Five Eyes countries have published new guidance on creating memory safety roadmaps.
Government
A new GAO report reveals that 20 out of 23 US federal agencies have not fully implemented incident response plans.
Government
US government agency was targeted in attacks that involved exploitation of an Adobe ColdFusion vulnerability tracked as CVE-2023-26360.
Government
UK and Korea say DPRK state-sponsored hackers targeted governments, defense organizations via supply chain attacks.
Government
New CISA pilot program brings cutting-edge cybersecurity services to critical infrastructure entities that need support.
Government
New CISA guidance details cyber threats and risks to healthcare and public health organizations and recommends mitigations.
Cybersecurity Funding
The US Department of Energy is offering $70 million in funding to improve the cybersecurity of rural and municipal utilities.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)