Application Security
Google late Tuesday shipped another urgent security patch for its dominant Chrome browser and warned that attackers are exploiting one of the zero-days in...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Cybersecurity Funding
HYPR, a company that provides a cloud-based passwordless authentication platform, has raised $35 million in a Series C financing, doubling the company’s total funding...
Cybersecurity Funding
Mastercard on Monday announced that it’s acquiring digital identity verification company Ekata for $850 million.The acquisition of Seattle-based Ekata is part of Mastercard’s plan...
Cyberwarfare
Following sanctions announced by the U.S. Department of the Treasury last week, Russian cyber-security firm Positive Technologies says the accusations are groundless.
Cyber Insurance
Several cybersecurity-related acquisitions and mergers were announced in the week of April 12-18, 2021.
Email Security
A majority of the largest energy companies in the United States appear to have neglected the security of their domain names, according to CSC,...
Cloud Security
Google’s problems with in-the-wild Chrome browser zero-days appear to be multiplying by the month.
Application Security
Just weeks after a wave of major in-the-wild zero-day attacks against Exchange Server installations globally, Microsoft is raising a fresh alarm for four new...
Cybersecurity Funding
Veriff, a provider of automated identity verification technology, today announced that it has secured $69 million in Series B financing, bringing the total amount...
Application Security
Microsoft this week announced the open source availability of Python code for “CyberBattleSim,” a research toolkit that supports simulating complex computer systems.
Application Security
The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has released a new tool to help with the detection of potential...
Application Security
Cisco this week announced patches for tens of vulnerabilities across its product portfolio, including a critical severity issue impacting the SD-WAN vManage software.
Application Security
Threat actors are leveraging the supply chain to deliver various types of threats to organizations, and few of them are spared from such attacks,...
Application Security
Researchers Flag ‘FlixOnline’ as a Malicious Android Play Store App That Combines Social Engineering With WhatsApp Auto-Replies to Propagate
Application Security
Threat actors are constantly targeting new vulnerabilities in SAP applications within days after the availability of security patches, according to a joint report issued...
Application Security
A sub-group of the 'Molerats' threat-actor has been using voice-changing software to successfully trick targets into installing malware, according to a warning from Cado...
Application Security
The United States Department of Defense (DoD) this week announced the launch of a new vulnerability disclosure program on HackerOne to identify vulnerabilities in...
Application Security
The U.S. government is warning that Advanced Persistent Threat (APT) actors are exploiting vulnerabilities in Fortinet FortiOS in ongoing attacks targeting commercial, government, and...
Cloud Security
A critical vulnerability recently addressed in the VMware Carbon Black Cloud Workload could be abused to execute code on a vulnerable server, according to...
Application Security
A pair of unpatched vulnerabilities in QNAP small office/home office (SOHO) network attached storage (NAS) devices could allow attackers to execute code remotely, according...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)