Application Security
OMB has published new guidance on federal agencies obtaining security guarantees from software vendors.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Government
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
Data Breaches
The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.
Government
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Government
Switzerland said government operational data might have been stolen in a ransomware attack on a technology firm that provides software for several departments.
Application Security
Cybersecurity news that you may have missed this week: AI regulation, layoffs, US aerospace malware attacks, and post-quantum encryption.
Government
As it pushes to renew a cornerstone law that authorizes major surveillance programs, the Biden administration faces an American public that’s broadly skeptical of...
Government
US and Israeli government agencies have published new guidance on preventing malicious exploitation of remote access software.
Cyberwarfare
The US and Korea are warning of North Korean social engineering attacks targeting employees of think tanks, academic and research institutions, and news media...
Government
Apple has denied working with any government to add backdoors to its products after Russia accused the company of helping the NSA hack iPhones.
Government
U.S. President Joe Biden has picked a new NSA and Cyber Command leader to oversee America’s cyber warfare and defense.
Cyberwarfare
The US government has announced sanctions against four entities and one individual engaging in cyber activities on behalf of the North Korean government.
Artificial Intelligence
White House announced new efforts to guide federally backed research on artificial intelligence (AI).
Cloud Security
GAO report underlines the need for federal agencies to fully implement key cloud security practices.
Artificial Intelligence
The head of OpenAI, which makes ChatGPT, told Congress that government intervention “will be critical to mitigate the risks of increasingly powerful” AI systems.
Artificial Intelligence
The Biden administration plans to announce an investment of $140 million to establish seven new AI research institutes, administration officials said.
Cyber Insurance
The purpose of a backstop would be to make cyberinsurance more widely available and affordable to the whole market – but it isn’t yet...
Government
CISA has described and published a set of principles for the development of security-by-design and security-by-default cybersecurity products.
Artificial Intelligence
The Biden administration wants stronger measures to test the safety of artificial intelligence tools such as ChatGPT before they are publicly released.
Government
The national strategy outlined by the Federal Government on March 1, 2023, is a monumental attempt to weave a consistent approach to cybersecurity for...
Government
The proposed UK Online Safety Bill is the enactment of two long held government desires: the removal of harmful internet content, and visibility into...
Government
Executive order will require the head of any U.S. agency using commercial spyware programs to certify that the program doesn’t pose a significant counterintelligence...
Government
A nearly six-hour grilling of TikTok’s CEO by lawmakers brought the platform’s 150 million U.S. users no closer to an answer as to whether...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)