Data Protection
A team of researchers from the Ruhr University Bochum in Germany has disclosed a series of new attack methods against signed PDF files.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Cloud Security
Cybersecurity company Fortinet has acquired Secure Access Service Edge (SASE) cloud provider OPAQ Networks.
Data Protection
Mozilla is the latest browser maker to have announced updated policies that would reduce the lifetime of TLS (Transport Layer Security) certificates.
Cloud Security
XM Cyber, an Israel-based company that offers a cyberattack simulation platform, announced on Thursday that it raised $17 million in a Series B funding...
Cybercrime
More than 15 billion username and password pairs have been offered on cybercrime marketplaces, including over 5 billion unique credentials, according to a report...
Identity & Access
The National Security Agency (NSA) has published a series of recommendations on how to properly configure IP Security (IPsec) Virtual Private Networks (VPNs).
Identity & Access
Rethinking These Familiar Terms to Address New Ways of Working
Data Protection
An Elasticsearch database pertaining to e-learning platform OneClass was found to expose data on over one million students and lecturers, vpnMentor reveals.
Identity & Access
The need for improved access control is proven by empirical observation -- it keeps failing. But improving access control beyond passwords suffers from a...
Data Protection
Twitter has started informing business customers that their billing information may have been exposed in what the company has described as a “data security...
Identity & Access
Microsoft has announced improved identity and access management protections for AccountGuard users in the United States, ahead of the 2020 elections.
Identity & Access
Since the introduction of computers, usernames and passwords have been the primary method used for access control and authentication. However, as post-mortem analysis of...
Data Protection
Zoom announced on Wednesday that it has decided to offer end-to-end encryption to free users after all, as long as they verify their account...
Identity & Access
Apple has announced the availability of a series of open source tools designed to foster collaboration between password manager developers.
Identity & Access
Google this week announced expansions to the Advanced Protection Program, with the addition of Google Nest and support for more types of security keys...
Cloud Security
Private equity investment company Thoma Bravo on Tuesday announced its intention to acquire secure business collaboration solutions provider Exostar, reportedly for roughly $100 million.
Data Protection
Encrypted messaging service Signal has announced the introduction of a new feature that allows users to recover their data if they switch to a...
Application Security
At this week’s Build virtual event, Microsoft announced new Identity and Azure features meant to improve security for both application developers and enterprise customers.
Identity & Access
Under the Current Economic Conditions, Security Professionals Must Quickly Re-assess Their Approach to Defending Against Insider Threats.
Cybersecurity Funding
Enterprise identity protection company Semperis on Wednesday announced that it raised $40 million in a Series B funding round, which brings the total raised...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)