Identity & Access
Static Passwords Are No Longer Enough to Secure Systems
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Application Security
Axis Security, a company that specializes in private application access, emerged from stealth mode on Tuesday with $17 million in funding.
Cloud Security
Researchers have discovered 16 types of vulnerabilities, including many backdoors, in Zyxel’s CloudCNM SecuManager network management software. The vendor has confirmed the flaws and...
Endpoint Security
Google has released a new software tool designed to identify potential USB keystroke injection attacks and block devices they originate from.
Identity & Access
Identity management firm Auth0 has launched Auth0 Signals, a collection of threat intelligence tools and capabilities designed to protect customers from identity attacks.
Identity & Access
Google has announced that Android and macOS users can now use more web browsers to initially register security keys to their accounts.
Identity & Access
Free and open certificate authority (CA) Let’s Encrypt has decided that it will not revoke one million of the certificates affected by the recent...
Data Protection
Most Intel chipsets released in the past five years are affected by a vulnerability that can be exploited to obtain encrypted data and compromise...
Email Security
ProtonMail on Thursday introduced a new feature designed to make it more difficult for hackers and spammers to impersonate users who have custom domain...
Identity & Access
What You Need to Know to Make Sure You’re Headed in the Right Direction on Your Authentication Journey. As Risk-Based Authentication Methods Continue to...
ICS/OT
The cost of poorly protected device identities has long been assumed, but not proven, to be large. Specification of the part played by SSH...
Cloud Security
On August 7, 2019, a single credential stuffing attack against a financial services company recorded 55,141,782 malicious login attempts. To put that in perspective,...
Compliance
Amazon-owned home security and smart home company Ring this week announced new security and privacy features for all of its users.
Identity & Access
Google this week announced that users in 10 countries can now take advantage of the hardware based two-factor authentication (2FA) functionality offered by the...
Identity & Access
Apple has joined the FIDO Alliance, an organization that aims to help reduce the use of passwords by providing free and open authentication standards.
Identity & Access
In many cases, passwords are the primary line of defense protecting user accounts from being hijacked in an account takeover (ATO) attack. With the...
Data Protection
An election application used by Israel’s Likud party has exposed the personal information of over 6 million voters.Likud, the party of Israeli Prime Minister...
Cloud Security
Hewlett Packard Enterprise (HPE) on Monday announced that it has acquired Scytale, an identity management startup that specializes in cloud-native security and zero trust...
Identity & Access
Google on Thursday announced that it has released the source code for a project named OpenSK in an effort to allow users to create...
Identity & Access
An Increasingly Diverse, Dynamic Workforce Is Driving Dramatic Change in How Users Authenticate
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)