Government
Some K-12 public schools are racing to improve protection against the threat of online attacks, but lax cybersecurity means thousands of others are vulnerable...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Government
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
Data Breaches
The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.
Government
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Artificial Intelligence
CISA details its efforts to promote the use of AI in cybersecurity and guide critical infrastructure in adopting AI.
Data Breaches
The State of Maine says the personal information of 1.3 million individuals was compromised in the MOVEit attack.
Government
DHS launches Shields Ready, a new campaign promoting security and resilience for critical infrastructure organizations.
Government
Secure-by-design is clearly important to the federal government, and there is a strong possibility that it will become a regulatory requirement for the critical...
Artificial Intelligence
President Joe Biden on Monday will sign a sweeping executive order to guide the development of artificial intelligence — requiring industry to develop safety...
Government
CISA and the HHS have released resources for healthcare and public health organizations to improve their security.
Government
Environmental Protection Agency (EPA) withdraws recent water sector cybersecurity rules due to lawsuits by states and water associations.
Government
CISA is now flagging vulnerabilities and misconfigurations that are known to be exploited in ransomware attacks.
Government
CISA, FBI, NSA, and US Treasury published new guidance on improving the security of open source software in OT and ICS.
Cybersecurity Funding
Noteworthy stories that might have slipped under the radar: cybersecurity funding increases, new laws, and government’s illegal use of smartphone location data.
Government
New US government guidance details the challenges that application developers and vendors face in identity and access management (IAM).
Government
A Key US Government Surveillance Tool Should Face New Limits, a Divided Privacy Oversight Board Says
A sharply divided privacy oversight board is recommending that the FBI and other agencies be required to get court approval before reviewing the communications...
Government
Roughly 80% of CISA staff will be sent home at the end of the week in case of a government shutdown.
Government
CISA unveils a new Hardware Bill of Materials (HBOM) framework for buyers and sellers to communicate about components in physical products.
Government
British lawmakers approved an ambitious but controversial new internet safety law with wide-ranging powers to crack down on digital and social media companies.
Government
CISA has released new guidance on how federal agencies can integrate identity and access management into their ICAM architecture.
Artificial Intelligence
Tech executives discussed the idea of government regulations for artificial intelligence (AI) at an unusual closed-door meeting in the U.S. Senate on September 13th.
Artificial Intelligence
The US Department of Energy gives $39 million in funding for nine projects to advance the cybersecurity of distributed energy resources.
Cybercrime
The US and UK have announced sanctions against 11 more alleged members of the Russian cybercrime group Trickbot.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)