CISO Strategy
Microsoft security chief Charlie Bell pledges significant reforms and a strategic shift to prioritize security above all other product features.
Hi, what are you looking for?
SecurityWeek
Government
New CISA Deputy Director Madhu Gottumukkala has joined the agency from South Dakota’s Bureau of Information and Technology.
Funding/M&A
British startup exits stealth with $20 million in seed-stage financing led by US investors Scout Ventures and Artis Ventures.
Compliance
By baking minimum expectations into procurement conversations, the plan is to steer software vendors to “secure-by-design and default” basics.
Government
The US has sanctioned Myanmar warlord Saw Chit Thu and his militia for their roles in cyber scams causing billions in losses to American...
Government
The White House has published a national security memorandum focusing on critical infrastructure security and resilience.
Artificial Intelligence
New CISA guidelines categorize AI risks into three significant types and pushes a four-part mitigation strategy.
Data Protection
The FTC is sending a total of $5.6 million in refunds to over 117,000 Ring customers as result of a 2023 settlement.
Government
New US guidance details foreign malign influence operations to help election infrastructure stakeholders increase resilience.
Government
The bill was approved on a bipartisan basis, 273-147, though it will still have to clear the Senate to become law.
Government
Speaker Mike Johnson is expected to bring forward a Plan B that would reform and extend Section 702 of the Foreign Intelligence Surveillance Act...
Data Breaches
The US government issues a red-alert for what appears to be a massive supply chain breach at Sisense, a company that sells big-data analytics...
Government
USCYBERCOM’s Cyber National Mission Force participated in 22 foreign hunt forward operations in 2023.
Government
A bill that would reauthorize Section 702 of the Foreign Intelligence Surveillance Act was blocked by a conservative revolt.
Government
CISA's Malware Next-Gen system is now available for any organization to submit malware samples and other suspicious artifacts for analysis.
Government
US National Security Agency appoints Dave Luber as its new cybersecurity director following the retirement of Rob Joyce.
Government
Noteworthy stories that might have slipped under the radar: the CISA hack could impact 100,000 people, Microsoft AI Copilot banned by US House, UK...
Data Breaches
Acuity, the tech firm from which hackers claimed to have stolen State Department and other government data, confirms hack, but says stolen info is...
Government
Ivanti releases a carefully scripted YouTube video and an open letter from chief executive Jeff Abbott vowing to fix the entire security organization.
Cloud Security
News analysis: SecurityWeek editor-at-large Ryan Naraine reads the CSRB report on China's audacious Microsoft’s Exchange Online hack and isn't at all surprised by the findings.
Government
US Defense Department releases defense industrial base cybersecurity strategy with a focus on four key goals.
Cybersecurity Funding
The US Department of Energy announces $15 million funding for university-based electric power cybersecurity centers.
Artificial Intelligence
U.S. federal agencies must show that their artificial intelligence tools aren’t harming the public, or stop using them, under new rules unveiled by the...
Government
CISA is seeking comment on the implementation of CIRCIA, which will cost $2.6 billion and will impact 316,000 entities.
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
RegisterLearn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.
RegisterExpert Insights
In the end, cybersecurity isn’t just about collecting data. It’s about proving that your defenses actually work.
(Torsten George)
Despite massive investment, the explosion of sophisticated malware and deepfake attacks persists because organizations struggle to verify digital identities and establish fundamental trust.
(Stu Sjouwerman)
Trying to block AI tools outright is a losing strategy. SaaS and AI are increasingly inseparable, and AI isn’t limited to tools like ChatGPT or Copilot anymore.
(Alastair Paterson)
CTI, digital brand protection and other cyber risk initiatives shouldn’t only be utilized by security and cyber teams.
(Marc Solomon)
Sightline Security’s founder explains why nonprofits need cybersecurity solutions tailored to their unique missions — and why vendors need to listen.
(Jennifer Leggio)