Identity & Access
Google announced on Wednesday that it has simplified the enrollment process for its Advanced Protection Program and it now allows users to activate a...
Hi, what are you looking for?
SecurityWeek
Identity & Access
The identity security company beat quarterly expectations and raised its outlook as enterprises face growing pressure to secure AI agents and other non-human identities.
Identity & Access
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
Identity & Access
When Android users get a call from a non-contact, they will see more information about the caller, including their country.
Identity & Access
Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.
Cybersecurity Funding
Passwordless multi-factor authentication technology provider Trusona this week announced it has raised $20 million as part of a Series C funding round led by...
Identity & Access
Weak security measures in place at several major wireless carriers in the United States make it easy for attackers to perform SIM swap attacks...
Identity & Access
Threat actors tend to focus on the human element as the weakest link in the cyber-attack chain, often using stolen, weak, default, or otherwise...
Application Security
Facebook, Samsung and Ring have unveiled new or improved privacy and security tools at the 2020 CES consumer electronics show taking place this week...
Audits
OpenSSL has evolved a great deal in terms of security since the disclosure of the Heartbleed vulnerability back in 2014.
Cloud Security
An Elasticsearch cluster containing information on Honda owners in North America was recently found to be accessible from the Internet without any authentication.Discovered on...
Artificial Intelligence
Facial recognition systems can produce wildly inaccurate results, especially for non-whites, according to a US government study released Thursday that is likely to raise...
Application Security
Google this week announced plans to turn off access to G Suite account data for less secure apps (LSAs), as they represent a potential...
Cybercrime
A credential harvesting campaign has been targeting multiple government procurement services in the United States and abroad, Anomali reveals.
Funding/M&A
Critical infrastructure protection company OPSWAT has acquired Network Access Control (NAC) and Software Defined Perimeter (SDP) solutions provider Impulse.
Identity & Access
Microsoft this week issued guidance regarding Windows Hello for Business (WHfB) public keys that persist even after the devices they are tied to are...
Black Hat
CrackQ Password Cracking Manager is an Interface for Hashcat Served by a REST API and a JavaScript Web App
Identity & Access
The Greek philosopher Heraclitus is quoted as having said, “change is the only constant in life.” While I’m not sure that I agree with...
Identity & Access
Twitter this week announced that its users no longer need a phone number to add extra protection to their accounts via 2-Factor Authentication (2FA).
Cybersecurity Funding
Popular password manager 1Password has closed a $200 million Series A round, which the company says is the first outside investment following 14 years...
Cybercrime
Ecommerce fraud prevention solutions provider Riskified has raised $165 million in a Series E funding round at a valuation of over $1 billion.
Identity & Access
There’s More to a Passwordless Future than Adopting Standards and Choosing Authentication Methods
Cloud Security
In addition to new security tools for Azure, at the Ignite 2019 conference this week, Microsoft announced new capabilities aimed at improving the security...
Cybercrime
Retail giant Bed Bath & Beyond revealed in a recent filing with the U.S. Securities and Exchange Commission (SEC) that some online customer accounts...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)