Government
On March 15, 2023, the SEC announced a proposal for new cybersecurity requirements for covered entities.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Government
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
Data Breaches
The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.
Government
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Data Protection
SecurityWeek spoke to VC firm Quantum Exponential about the UK National Quantum Strategy and investments in quantum computing.
Cyberwarfare
The Chinese hacker group Tick has targeted an East Asian data loss prevention firm whose customers include military and other government organizations.
Data Breaches
The Hawaii DOH says roughly 3,400 death records were accessed via the compromised account of a former employee.
Government
President Biden’s new $6.9 trillion budget proposal for 2024 shows that the administration wants to increase cybersecurity spending.
Government
TSA instructs airport and aircraft operators to improve their cybersecurity resilience and prevent infrastructure disruption and degradation.
Government
Some say the White House cybersecurity strategy is largely aspirational. Its boldest initiatives — including stricter rules on breach reporting and software liability —...
Cyberwarfare
US National Cybersecurity Strategy pushes regulation, aggressive 'hack-back' operations.
Government
The White House is giving all federal agencies 30 days to wipe TikTok off all government devices.
Government
Companies have announced securing billions of dollars in cybersecurity-related contracts with the United States government in 2022.
Government
The National Security Agency (NSA), the Cybersecurity and Infrastructure Security Agency (CISA), and the Office of the Director of National Intelligence (ODNI) have released...
Cybercrime
The White House is bringing together three dozen nations, the European Union and a slew of private-sector companies for a two-day summit starting Monday...
Government
The White House announced on Wednesday that the Industrial Control Systems (ICS) Cybersecurity Initiative has been expanded to include the chemical sector.
Government
Executive order requires that US signals intelligence activities be conducted "only in pursuit of defined national security objectives"US President Joe Biden signed an executive...
Artificial Intelligence
The Biden administration unveiled a set of far-reaching goals Tuesday aimed at averting harms caused by the rise of artificial intelligence systems, including guidelines...
Cybercrime
Threat actors are impersonating various US government departments in phishing attacks targeting the Microsoft 365 credentials of government contractors.
Application Security
Cybersecurity Funding
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)