Government
CISA says no federal agencies other than Treasury were impacted by the recent compromise of a BeyondTrust cloud-based service.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
The AIxCC competition winner will analyze messaging app code and compiled binaries for vulnerabilities, with technology that could also help commercial customers secure their...
Data Breaches
The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense.
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Government
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
Government
The United States has imposed sanctions on two groups linked to Iranian and Russian efforts to target American voters with disinformation ahead of this...
Data Protection
The DoJ has issued a final rule addressing adversaries’ access to and exploitation of Americans’ bulk sensitive personal information.
Government
The 2025 National Defense Authorization Act (NDAA) has been signed into law and it authorizes several cyber-related initiatives.
Cyberwarfare
The Russian government accuses the US threat-intel firm of participating in the collection and analysis of data on the actions of the Russia's armed...
Cloud Security
CISA’s Binding Operational Directive 25-01 requires federal agencies to align cloud environments with SCuBA secure configuration baselines.
Artificial Intelligence
While the challenges are significant, organizations have an opportunity to build scalable AI governance frameworks that ensure compliance while enabling responsible AI innovation.
Government
CISA has updated its National Cyber Incident Response Plan in line with the changing threat landscape and is now seeking public comment.
Government
Israeli forensics firm Cellebrite has been linked to an Android zero-day used to secretly install spyware on Serbian journalists' phones.
Government
The new agreement has a narrower scope and additional safeguards to minimize the risk to national security.
Government
EU sent TikTok an urgent request for more information about Romanian intelligence files suggesting that Russia coordinated influencers to promote a candidate who became...
Government
Noteworthy stories that might have slipped under the radar: ENISA and NCSC release cybersecurity reports, abuse of Cloudflare services, FBI warns of gen-AI enabling...
Government
The European Union has adopted new legislation to establish a cybersecurity shield and ensure adequate security standards for managed security services.
Government
US senators introduce new legislation to protect health data and strengthen the cybersecurity of the country’s healthcare sector.
Government
Mexico’s President Says Government Is Investigating Reported Ransomware Hack of Legal Affairs Office
Mexico’s president says the government is investigating a reported ransomware hack of the country's legal affairs office.
Artificial Intelligence
Trump promised in his presidential campaign platform to “repeal Joe Biden’s dangerous Executive Order that hinders AI Innovation, and imposes Radical Leftwing ideas on...
Government
CISA told SecurityWeek that all appointees of the Biden-Harris administration will leave by noon on inauguration day.
Government
Noteworthy stories that might have slipped under the radar: TSA proposes new cyber rules for pipelines and railroads, Google adds scam call detection to...
Government
Canada won’t block access to TikTok but is ordering the dissolution of its Canadian business after a national security review.
Government
Voting system passwords were mistakenly put on the Colorado Secretary of State’s website for several months before being spotted and taken down.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)