Cybercrime
Ecommerce fraud prevention solutions provider Riskified has raised $165 million in a Series E funding round at a valuation of over $1 billion.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Identity & Access
There’s More to a Passwordless Future than Adopting Standards and Choosing Authentication Methods
Cloud Security
In addition to new security tools for Azure, at the Ignite 2019 conference this week, Microsoft announced new capabilities aimed at improving the security...
Cybercrime
Retail giant Bed Bath & Beyond revealed in a recent filing with the U.S. Securities and Exchange Commission (SEC) that some online customer accounts...
Cybercrime
There have been many studies and investigations into the number of stolen credentials available on the dark web. However, a new report that was...
Identity & Access
For years, cyber security experts have recommended augmenting usernames and passwords with multi-factor authentication (MFA) to add an additional layer of security for access...
Cloud Security
Adobe has admitted that some Creative Cloud customer information — 7.5 million records, according to the researchers who stumbled upon the data — was...
Cloud Security
Microsoft this week announced the public preview of a new feature that allows enterprise users to check their Azure Active Directory sign-ins for any...
Data Protection
The official campaign website of U.S. President Donald Trump exposed information that may have allowed hackers to intercept emails and send out emails on...
Identity & Access
Threat intelligence company Digital Shadows has uncovered over 550 fake domains attempting to mimic websites related to the 2020 presidential election in the United...
Data Protection
Safari does use Tencent to ensure that users in China do not navigate to malicious websites, but it never sends the actual URL of...
Identity & Access
Starting today, October 15, users in the United States have a new two-factor authentication (2FA) method at their disposal in the form of Google’s...
Identity & Access
In 2010, SANS reported that knowledge of the Pass the Hash attack first described some thirteen years earlier was still poor. By 2019, knowledge...
Identity & Access
NIST has published a draft Zero Trust Architecture (ZTA) special publication (SP.800.207). The purpose is to develop a technology-neutral lexicon of the logical components...
Identity & Access
When it Comes to Proving Users Are Who They Say They Are, There’s no Single Solution That Will Meet All Your Needs.
ICS/OT
A researcher has used a free tool that he created and open source intelligence (OSINT) to demonstrate how easy it is for adversaries to...
Data Protection
Google on Wednesday announced that its Password Checkup tool has been added to the Account password manager, and the company has unveiled some new...
Identity & Access
Malicious actors may be able to easily access unprotected Cisco WebEx and Zoom meetings due to an API enumeration vulnerability, Cequence Security’s CQ Prime...
Audits
New York Attorney General Letitia James filed a lawsuit against Dunkin' Donuts in the Supreme Court of the State of New York on Thursday,...
Identity & Access
A vulnerability recently addressed in LastPass could be abused by attackers to expose the last site credentials filled by LastPass.A freemium password manager, LastPass...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)