Cybercrime
Using indicators of compromise (IoCs) made available by FireEye, threat intelligence and incident response firm Volexity determined that the threat group behind the SolarWinds...
Hi, what are you looking for?
SecurityWeek
Identity & Access
The identity security company beat quarterly expectations and raised its outlook as enterprises face growing pressure to secure AI agents and other non-human identities.
Identity & Access
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
Identity & Access
When Android users get a call from a non-contact, they will see more information about the caller, including their country.
Identity & Access
Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.
Cybersecurity Funding
Private equity firm Thoma Bravo on Thursday announced a strategic growth investment in machine identity solutions provider Venafi.
Cloud Security
Data management and governance provider Skyflow this week announced a new $17.5 million Series A financing round, bringing the total raised by the company...
Application Security
The Apache Software Foundation has released a security update for Struts 2, to address what is described as a “possible remote code execution” flaw...
Cybersecurity Funding
Beyond Identity, a security startup on a quest to eliminate passwords, today announced a $75 million Series B funding round, bringing the total investment...
Identity & Access
Organizations Must Assume That Bad Actors Are Already in Their Networks
Identity & Access
Microsoft last week released an out-of-band update for Windows to address authentication issues related to a recently patched Kerberos vulnerability.
Email Security
Microsoft this week announced two new features meant to improve the security of priority accounts in Microsoft 365.
Cybersecurity Funding
Forter Becomes Unicorn After $125 Million Series E Funding RoundE-commerce fraud prevention company Forter announced on Thursday that it has achieved “unicorn” status after...
Identity & Access
Palo Alto Networks security researchers identified more than 20 Amazon Web Services (AWS) APIs that can be abused to obtain information such as Identity...
Application Security
build.security, an Israel-based company that has been developing an authorization policy management platform, emerged from stealth mode on Wednesday with $6 million in seed...
Application Security
Zoom over the weekend rolled out two new features that are aimed at tackling meeting disruptions.
Funding/M&A
Security firm Barracuda Networks announced on Thursday that it has acquired Fyde, a provider of Zero Trust Network Access (ZTNA) solutions.
Identity & Access
The government of Finland said Thursday it was preparing legislation that would allow citizens to change their personal identity codes in cases of gross...
Identity & Access
October was National Cyber Security Awareness Month, which served as an important annual reminder for organizations to never let their guard down when it...
Data Protection
Google announced on Thursday that Google One customers can now use a new virtual private network (VPN) service that will provide them an extra...
Cloud Security
Microsoft this week announced the availability of a new password spray detection for Azure AD Identity Protection customers.
Cybersecurity Funding
Identity-focused intelligence company 4iQ on Tuesday announced that it has raised $30 million in a Series C funding round led by ForgePoint Capital and...
Cyberwarfare
Cyber warriors on NATO's eastern edge are warning that the growing number of people working from home globally due to the pandemic is increasing...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)