Identity & Access
Trustwave security researchers have discovered five new credential leaking vulnerabilities, two in a D-Link DSL modem and three in multiple Comba Telecom WiFi devices.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Cybercrime
Hackers were able to post offensive messages from the Twitter account of Jack Dorsey, the social media company’s CEO, after they tricked his mobile...
Cloud Security
California-based cybersecurity firm Imperva revealed on Tuesday that it recently learned of a security incident affecting some customers of its Cloud Web Application Firewall...
Data Protection
Some of the airlines that manage booking systems themselves have failed to implement important protection mechanisms, exposing their customers’ personal information, a researcher has...
Cybersecurity Funding
San Francisco, CA-based privileged access management (PAM) solution provider Remediant has closed a $15 million Series A funding round co-led by Dell Technologies Capital...
Identity & Access
Planning and Preparation Are Key to Successfully Adopting FIDO Standards for “Simpler, Stronger Authentication”
Cybercrime
A Ruby software package that contained a malicious backdoor has been removed from the Ruby Gems repository after compromising over ten libraries.Called rest-client, the...
Data Protection
Apple, Google and Mozilla announced on Wednesday that they have taken action against Kazakhstan’s efforts to spy on its citizens by requiring them to...
Identity & Access
All Sphinx servers that are exposed to the Internet are prone to abuse by cybercriminals, as they can be accessed by anyone, CERT-Bund warns.
Identity & Access
Yubico on Tuesday announced the general availability of YubiKey 5Ci, which the company has advertised as the world’s first security key to incorporate both...
Data Protection
Microsoft-owned GitHub on Monday announced that its token scanning service will also check commits for Atlassian, Dropbox, Discord, Proctorio and Pulumi tokens that have...
Data Protection
Google has shared some interesting data collected by the company from users of its Password Checkup extension for Chrome.
Identity & Access
The latest update released by Mozilla for Firefox patches a vulnerability that can be exploited to bypass the master password of the built-in password...
Data Protection
Slack on Tuesday unveiled several new security tools designed to provide administrators of its Enterprise Grid product better control over who can use the...
Identity & Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week published an advisory to warn of multiple vulnerabilities access control systems made by Prima...
Identity & Access
Critical vulnerabilities in enterprise virtual private network (VPN) solutions from Palo Alto Networks, Fortinet and Pulse Secure allow attackers to infiltrate corporate networks, obtain...
Data Protection
Robinhood, a California-based financial services company that provides a popular commission-free stock trading app, informed some users that their passwords were stored in plaintext.
Identity & Access
Biometric Authentication is No Longer Just the Stuff of Spy Movies or Reserved for Military-Grade Installations
Cybercrime
US telecoms company Sprint has informed some customers that their Sprint accounts have been accessed by hackers via a Samsung website.
Data Protection
Hackers can manipulate media files transferred by users through the WhatsApp and Telegram messaging applications due to the way the Android operating system allows...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)