Government
The Congressional Budget Office confirmed it had been hacked, potentially disclosing important government data to malicious actors.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
The AIxCC competition winner will analyze messaging app code and compiled binaries for vulnerabilities, with technology that could also help commercial customers secure their...
Data Breaches
The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense.
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Government
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
Artificial Intelligence
The Transparency in Frontier Artificial Intelligence Act (TFAIA) requires AI companies to implement and disclose publicly safety protocols to prevent their most advanced models...
Government
The CISA is set to expire on September 30, 2025, raising urgent questions about risk, politics, and the future of threat intelligence.
Government
The government has announced a support package, but a cybersecurity expert has raised some concerns.
Government
Bringing politics into professional spaces undermines decision-making, collaboration, and ultimately weakens security teams.
Government
CISA says it is time for the CVE Program to focus on improving trust, responsiveness, and the caliber of vulnerability data.
Government
Marat Tyukov, Mikhail Gavrilov, and Pavel Akulov targeted US critical infrastructure and over 500 energy companies in 135 countries.
Cybercrime
State websites and phone lines were taken offline, but officials say emergency services and personal data remain unaffected.
Data Protection
Tech giants have received a letter from the FTC urging them not to weaken security and privacy at the request of foreign governments.
Data Protection
Britain abandoned its demand that Apple provide backdoor access to any encrypted user data stored in the cloud.
Government
From hacked satellites to nuclear threats in orbit, the battle for dominance beyond Earth is redefining modern warfare and national security.
Government
CISA and FEMA announced two grants of more than $100 million for state, local, and tribal governments looking to improve cybersecurity.
Government
The US Senate voted to confirm Sean Cairncross as the National Cyber Director, five months after nominalization.
Government
Illumina will pay $9.8 million to settle accusations that products provided to the US government were affected by cybersecurity flaws.
Government
Two US senators introduced a bipartisan bill to help prepare federal government agencies for quantum computing threats.
Government
Committee Members voted to recommend Sean Plankey for director of the Cybersecurity and Infrastructure Security Agency.
Government
More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.
Cybercrime
Critics warn that a ban on ransomware payments may lead to dangerous unintended consequences, including forcing victims into secrecy or incentivizing attackers to shift...
Government
The UK government has sanctioned three Russian APTs and 18 individuals for their involvement in cyber operations against Ukraine, NATO allies, and EU.
Government
NASA needs to perform an agency-wide cybersecurity risk assessment and to complete important cybersecurity tasks for each of its projects.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)