Cybercrime
More than 15 billion username and password pairs have been offered on cybercrime marketplaces, including over 5 billion unique credentials, according to a report...
Hi, what are you looking for?
SecurityWeek
Identity & Access
The identity security company beat quarterly expectations and raised its outlook as enterprises face growing pressure to secure AI agents and other non-human identities.
Identity & Access
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
Identity & Access
When Android users get a call from a non-contact, they will see more information about the caller, including their country.
Identity & Access
Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.
Identity & Access
The National Security Agency (NSA) has published a series of recommendations on how to properly configure IP Security (IPsec) Virtual Private Networks (VPNs).
Identity & Access
Rethinking These Familiar Terms to Address New Ways of Working
Data Protection
An Elasticsearch database pertaining to e-learning platform OneClass was found to expose data on over one million students and lecturers, vpnMentor reveals.
Identity & Access
The need for improved access control is proven by empirical observation -- it keeps failing. But improving access control beyond passwords suffers from a...
Data Protection
Twitter has started informing business customers that their billing information may have been exposed in what the company has described as a “data security...
Identity & Access
Microsoft has announced improved identity and access management protections for AccountGuard users in the United States, ahead of the 2020 elections.
Identity & Access
Since the introduction of computers, usernames and passwords have been the primary method used for access control and authentication. However, as post-mortem analysis of...
Data Protection
Zoom announced on Wednesday that it has decided to offer end-to-end encryption to free users after all, as long as they verify their account...
Identity & Access
Apple has announced the availability of a series of open source tools designed to foster collaboration between password manager developers.
Identity & Access
Google this week announced expansions to the Advanced Protection Program, with the addition of Google Nest and support for more types of security keys...
Cloud Security
Private equity investment company Thoma Bravo on Tuesday announced its intention to acquire secure business collaboration solutions provider Exostar, reportedly for roughly $100 million.
Data Protection
Encrypted messaging service Signal has announced the introduction of a new feature that allows users to recover their data if they switch to a...
Application Security
At this week’s Build virtual event, Microsoft announced new Identity and Azure features meant to improve security for both application developers and enterprise customers.
Identity & Access
Under the Current Economic Conditions, Security Professionals Must Quickly Re-assess Their Approach to Defending Against Insider Threats.
Cybersecurity Funding
Enterprise identity protection company Semperis on Wednesday announced that it raised $40 million in a Series B funding round, which brings the total raised...
Funding/M&A
CyberArk on Wednesday announced that it has acquired Idaptive, an Identity as a Service (IDaaS) provider based in Santa Clara, California, for $70 million...
Cloud Security
Cloud security company Ermetic emerged from stealth mode this week with a platform that automates detection and remediation of identity and access-based risks.
Identity & Access
Google this week announced that Google Authenticator users can now transfer 2-Step Verification (2SV) secrets between devices.The new feature is meant to make it...
Identity & Access
An alert the U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) published this week reiterates previously issued recommendations on how organizations...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)