Data Protection
The National Security Agency (NSA) this week issued guidance for National Security System (NSS), Department of Defense (DoD), and Defense Industrial Base (DIB) cybersecurity...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Audits
Data security solutions provider Netwrix has merged with Stealthbits, a cybersecurity company focused on protecting sensitive data and credentials.
Application Security
Business communications platform Slack is scrambling to recover from an ongoing outage that is proving disruptive to cybersecurity response teams around the world.
Identity & Access
An attack method discovered in 2017 for defeating the audio version of Google’s reCAPTCHA system using speech-to-text services has once again been resurrected.
Cybercrime
Using indicators of compromise (IoCs) made available by FireEye, threat intelligence and incident response firm Volexity determined that the threat group behind the SolarWinds...
Cybersecurity Funding
Private equity firm Thoma Bravo on Thursday announced a strategic growth investment in machine identity solutions provider Venafi.
Cloud Security
Data management and governance provider Skyflow this week announced a new $17.5 million Series A financing round, bringing the total raised by the company...
Application Security
The Apache Software Foundation has released a security update for Struts 2, to address what is described as a “possible remote code execution” flaw...
Cybersecurity Funding
Beyond Identity, a security startup on a quest to eliminate passwords, today announced a $75 million Series B funding round, bringing the total investment...
Identity & Access
Organizations Must Assume That Bad Actors Are Already in Their Networks
Identity & Access
Microsoft last week released an out-of-band update for Windows to address authentication issues related to a recently patched Kerberos vulnerability.
Email Security
Microsoft this week announced two new features meant to improve the security of priority accounts in Microsoft 365.
Cybersecurity Funding
Forter Becomes Unicorn After $125 Million Series E Funding RoundE-commerce fraud prevention company Forter announced on Thursday that it has achieved “unicorn” status after...
Identity & Access
Palo Alto Networks security researchers identified more than 20 Amazon Web Services (AWS) APIs that can be abused to obtain information such as Identity...
Application Security
build.security, an Israel-based company that has been developing an authorization policy management platform, emerged from stealth mode on Wednesday with $6 million in seed...
Application Security
Zoom over the weekend rolled out two new features that are aimed at tackling meeting disruptions.
Funding/M&A
Security firm Barracuda Networks announced on Thursday that it has acquired Fyde, a provider of Zero Trust Network Access (ZTNA) solutions.
Identity & Access
The government of Finland said Thursday it was preparing legislation that would allow citizens to change their personal identity codes in cases of gross...
Identity & Access
October was National Cyber Security Awareness Month, which served as an important annual reminder for organizations to never let their guard down when it...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)