Application Security
Howard University closed its physical campus and canceled classes this week after experiencing a ransomware attack.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Cloud Security
Google on Tuesday published the Android Security Bulletin for September 2021 with patches for a total of 40 vulnerabilities, including seven that are rated...
Application Security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued new guidelines for government and private organizations to take into consideration when looking to...
Endpoint Security
Security practitioners must figure out how to enable a secure and resilient anywhere workforce to reduce risk
Application Security
A high severity vulnerability recently addressed in popular NPC package Pac-Resolver could be exploited to execute arbitrary code remotely.
Application Security
Jenkins over the weekend announced that hackers managed to gain access to one of its servers after exploiting a critical vulnerability affecting Atlassian Confluence...
Application Security
Microsoft’s embattled security response unit is scrambling to deal with another zero-day attack hitting users of its flagship Microsoft Office software suite.
Application Security
Social media giant Facebook on Thursday announced a new payout guideline to help vulnerability hunters better understand its bounty decisions related to given bugs.
Application Security
Software vendor SolarWinds failed to enable an anti-exploit mitigation available since the launch of Windows Vista 15 years ago, an oversight that made it...
Application Security
Network detection and response play Corelight has raised a fresh $75 million funding round to speed up its global expansion ambitions.The San Francisco-based Corelight...
Application Security
The Singapore Government Technology Agency (GovTech) on Tuesday introduced a new Vulnerability Rewards Programme (VRP) on HackerOne that offers bug bounty rewards of up...
Identity & Access
The United States Cybersecurity and Infrastructure Security Agency (CISA) this week added single-factor authentication to its list of bad practices.
Application Security
Israeli security giant Check Point Software Technologies has joined the cybersecurity shopping spree with Monday’s announcement of a deal to purchase Avanan, a startup...
Identity & Access
Amazon announced this week that it will soon offer cybersecurity training materials and multi-factor authentication (MFA) devices for free.
Application Security
The financially-motivated threat actor tracked as FIN8 has added a potent new backdoor to its arsenal and is already using it in attacks in-the-wild,...
Data Protection
UpGuard security researchers have identified tens of Microsoft Power Apps portals that exposed millions of records due to being misconfigured.
Application Security
United States-based Nokia-owned SAC Wireless has started sending notification letters to its current and former employees to inform them of a data breach that...
Application Security
Japanese cryptocurrency exchange Liquid on Thursday announced it fell victim to an attack that resulted in large amounts of crypto-currency assets being stolen.Liquid announced...
Application Security
Cisco this week published information on a critical code execution vulnerability affecting its small business RV110W, RV130, RV130W, and RV215W routers, but cautioned that...
Identity & Access
Software repository platform GitHub is once again encouraging users to enable two-factor authentication (2FA) to better secure their accounts.The Microsoft-owned hosting service has had...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)