Cybercrime
There have been many studies and investigations into the number of stolen credentials available on the dark web. However, a new report that was...
Hi, what are you looking for?
SecurityWeek
Identity & Access
The identity security company beat quarterly expectations and raised its outlook as enterprises face growing pressure to secure AI agents and other non-human identities.
Identity & Access
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
Identity & Access
When Android users get a call from a non-contact, they will see more information about the caller, including their country.
Identity & Access
Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.
Identity & Access
For years, cyber security experts have recommended augmenting usernames and passwords with multi-factor authentication (MFA) to add an additional layer of security for access...
Cloud Security
Adobe has admitted that some Creative Cloud customer information — 7.5 million records, according to the researchers who stumbled upon the data — was...
Cloud Security
Microsoft this week announced the public preview of a new feature that allows enterprise users to check their Azure Active Directory sign-ins for any...
Data Protection
The official campaign website of U.S. President Donald Trump exposed information that may have allowed hackers to intercept emails and send out emails on...
Identity & Access
Threat intelligence company Digital Shadows has uncovered over 550 fake domains attempting to mimic websites related to the 2020 presidential election in the United...
Data Protection
Safari does use Tencent to ensure that users in China do not navigate to malicious websites, but it never sends the actual URL of...
Identity & Access
Starting today, October 15, users in the United States have a new two-factor authentication (2FA) method at their disposal in the form of Google’s...
Identity & Access
In 2010, SANS reported that knowledge of the Pass the Hash attack first described some thirteen years earlier was still poor. By 2019, knowledge...
Identity & Access
NIST has published a draft Zero Trust Architecture (ZTA) special publication (SP.800.207). The purpose is to develop a technology-neutral lexicon of the logical components...
Identity & Access
When it Comes to Proving Users Are Who They Say They Are, There’s no Single Solution That Will Meet All Your Needs.
ICS/OT
A researcher has used a free tool that he created and open source intelligence (OSINT) to demonstrate how easy it is for adversaries to...
Data Protection
Google on Wednesday announced that its Password Checkup tool has been added to the Account password manager, and the company has unveiled some new...
Identity & Access
Malicious actors may be able to easily access unprotected Cisco WebEx and Zoom meetings due to an API enumeration vulnerability, Cequence Security’s CQ Prime...
Audits
New York Attorney General Letitia James filed a lawsuit against Dunkin' Donuts in the Supreme Court of the State of New York on Thursday,...
Identity & Access
A vulnerability recently addressed in LastPass could be abused by attackers to expose the last site credentials filled by LastPass.A freemium password manager, LastPass...
Identity & Access
Trustwave security researchers have discovered five new credential leaking vulnerabilities, two in a D-Link DSL modem and three in multiple Comba Telecom WiFi devices.
Cybercrime
Hackers were able to post offensive messages from the Twitter account of Jack Dorsey, the social media company’s CEO, after they tricked his mobile...
Cloud Security
California-based cybersecurity firm Imperva revealed on Tuesday that it recently learned of a security incident affecting some customers of its Cloud Web Application Firewall...
Data Protection
Some of the airlines that manage booking systems themselves have failed to implement important protection mechanisms, exposing their customers’ personal information, a researcher has...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)