Audits
Proton Technologies, the company best known for its privacy-focused email service ProtonMail, this week announced that the source code for all of its ProtonVPN...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Cloud Security
Nearly 250 million Microsoft Customer Service and Support (CSS) records were found exposed to the Internet in five insecure Elasticsearch databases, Comparitech reports.
Identity & Access
High-risk users are aware that they are more likely to be targeted by hackers compared to the general population, but many of them still...
Identity & Access
Facebook this week introduced a new notification to alert users when their accounts interact with a third-party application using Facebook Login.Dubbed “Login Notifications,” the...
Identity & Access
Google announced on Wednesday that it has simplified the enrollment process for its Advanced Protection Program and it now allows users to activate a...
Cybersecurity Funding
Passwordless multi-factor authentication technology provider Trusona this week announced it has raised $20 million as part of a Series C funding round led by...
Identity & Access
Weak security measures in place at several major wireless carriers in the United States make it easy for attackers to perform SIM swap attacks...
Identity & Access
Threat actors tend to focus on the human element as the weakest link in the cyber-attack chain, often using stolen, weak, default, or otherwise...
Application Security
Facebook, Samsung and Ring have unveiled new or improved privacy and security tools at the 2020 CES consumer electronics show taking place this week...
Audits
OpenSSL has evolved a great deal in terms of security since the disclosure of the Heartbleed vulnerability back in 2014.
Cloud Security
An Elasticsearch cluster containing information on Honda owners in North America was recently found to be accessible from the Internet without any authentication.Discovered on...
Artificial Intelligence
Facial recognition systems can produce wildly inaccurate results, especially for non-whites, according to a US government study released Thursday that is likely to raise...
Application Security
Google this week announced plans to turn off access to G Suite account data for less secure apps (LSAs), as they represent a potential...
Cybercrime
A credential harvesting campaign has been targeting multiple government procurement services in the United States and abroad, Anomali reveals.
Funding/M&A
Critical infrastructure protection company OPSWAT has acquired Network Access Control (NAC) and Software Defined Perimeter (SDP) solutions provider Impulse.
Identity & Access
Microsoft this week issued guidance regarding Windows Hello for Business (WHfB) public keys that persist even after the devices they are tied to are...
Black Hat
CrackQ Password Cracking Manager is an Interface for Hashcat Served by a REST API and a JavaScript Web App
Identity & Access
The Greek philosopher Heraclitus is quoted as having said, “change is the only constant in life.” While I’m not sure that I agree with...
Identity & Access
Twitter this week announced that its users no longer need a phone number to add extra protection to their accounts via 2-Factor Authentication (2FA).
Cybersecurity Funding
Popular password manager 1Password has closed a $200 million Series A round, which the company says is the first outside investment following 14 years...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)