Government
The TSA has released updated cybersecurity requirements for pipeline owners and operators, instructing them to test assessment and incident response plans.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Government
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
Data Breaches
The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.
Government
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Government
The SEC has adopted new rules requiring public companies to disclose cybersecurity breaches that have a material impact within four days.
Government
The Biden administration has nominated former Navy commander Harry Coker to replace the retired Chris Inglis.
Cloud Security
Cloud security researcher warns that stolen Microsoft signing key was more powerful and not limited to Outlook.com and Exchange Online.
Artificial Intelligence
Amazon, Google, Meta, Microsoft, OpenAI and other tech firms have voluntary agreed to AI safeguards set by the White House.
Cloud Security
Facing intense pressure after Chinese APT hack, Microsoft plans to expand logging defaults for lower-tier M365 customers.
Government
The two foreign companies are being sanctioned for “for trafficking in cyber exploits used to gain access to information systems.”
Government
New US cyber program will label smart devices that are considered safer and less vulnerable to attacks.
Government
The Biden-Harris administration has laid out the plan for implementing the National Cybersecurity Strategy.
Funding/M&A
Private equity giant plans to buy Forcepoint’s Global Governments and Critical Infrastructure (G2CI) business unit for $2.5 billion.
Government
Fears mount that UK Online Safety Bill may include a requirement for an encrypted message scanning capability.
Government
Cait Conley will coordinate with federal, state and local officials responsible for ensuring elections are secure ahead of the 2024 presidential election.
Government
Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of June 26,...
Government
Ann Dunkin, CIO at the Department of Energy, is more concerned about cyberattack speed than attack type or source.
Government
The White House has released a memorandum outlining the cybersecurity investment priorities for government departments and agencies for fiscal year 2025.
Government
The US government's cybersecurity agency adds VMware and Roundcube server flaws to its Known Exploited Vulnerabilities (KEV) catalog.
Government
New National Security Cyber Section will help the US disrupt and prosecute nation-state threat actors and state-sponsored cybercriminals.
CISO Strategy
Nobody doubts the need to increase board level cyber expertise, but there is no single preferred route.
Artificial Intelligence
Authorities worldwide are racing to rein in artificial intelligence, including in the European Union, where groundbreaking legislation is set to pass a key hurdle.
Government
CISA’s Binding Operational Directive 23-02 requires federal agencies to secure the network management interfaces of certain classes of devices.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)