Application Security
New research suggests more than 10,000 SaaS apps could remain vulnerable to a nOAuth variant despite the basic issue being disclosed in June 2023.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Identity & Access
The future of secure digital engagement depends on continuous identity verification and proofing that can scale with risk.
Email Security
Russian hackers posed as US State Department staff and convinced targets to generate and give up Google app-specific passwords.
ICS/OT
Censys researchers follow some clues and find hundreds of control-room dashboards for US water utilities on the public internet.
Funding/M&A
Identity security automation platform Cerby has raised $40 million in Series B funding to scale operations.
Email Security
Akamai documents a privilege escalation flaw in Windows Server 2025 after Redmond declines to ship an immediate patch.
Identity & Access
Microsoft is prioritizing passwordless sign-in and sign-up methods, and is making new accounts passwordless by default.
Cloud Security
San Francisco identity security play Veza closes a Series D fund round led by New Enterprise Associates (NEA).
Cybersecurity Funding
Push Security has raised $30 million in Series B funding to scale its browser-based identity security platform.
Cybersecurity Funding
Identity protection startup AuthMind has announced raising $19.3 million in a seed funding round led by Cheyenne Ventures.
Identity & Access
CISA is making recommendations for organizations and users in light of the recent Oracle legacy cloud environment hack.
Identity & Access
Major companies have agreed to gradually reduce the lifetime of TLS certificates over the next few years.
Cybersecurity Funding
The new funds will be used to extend Corsha’s reach into critical infrastructure and further improve its own use of AI.
Funding/M&A
The late-stage startup said the round was led Coatue Management and brings Island’s total external funding to approximately $730 million.
Artificial Intelligence
Microsoft has expanded the capabilities of Security Copilot with AI agents tackling data security, phishing, and identity management.
Funding/M&A
SpecterOps has raised an unusually large $75 million Series B funding round to accelerate the growth of its BloodHound Enterprise platform.
Identity & Access
Apple device management firm Jamf has entered into an agreement to acquire IAM platform Identity Automation.
Funding/M&A
In a signal move for the cybersecurity sector, identity and access management (IAM) vendor SailPoint has made its return to public markets.
Cybersecurity Funding
Identity management provider SGNL has raised $30 million in a Series A funding round led by Brightmind Partners.
Funding/M&A
CyberArk acquires early stage Boston startup Zilla Security for $165M, expanding its identity security and IGA capabilities.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)