Cybersecurity Funding
San Francisco, CA-based privileged access management (PAM) solution provider Remediant has closed a $15 million Series A funding round co-led by Dell Technologies Capital...
Hi, what are you looking for?
SecurityWeek
Identity & Access
The identity security company beat quarterly expectations and raised its outlook as enterprises face growing pressure to secure AI agents and other non-human identities.
Identity & Access
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
Identity & Access
When Android users get a call from a non-contact, they will see more information about the caller, including their country.
Identity & Access
Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.
Identity & Access
Planning and Preparation Are Key to Successfully Adopting FIDO Standards for “Simpler, Stronger Authentication”
Cybercrime
A Ruby software package that contained a malicious backdoor has been removed from the Ruby Gems repository after compromising over ten libraries.Called rest-client, the...
Data Protection
Apple, Google and Mozilla announced on Wednesday that they have taken action against Kazakhstan’s efforts to spy on its citizens by requiring them to...
Identity & Access
All Sphinx servers that are exposed to the Internet are prone to abuse by cybercriminals, as they can be accessed by anyone, CERT-Bund warns.
Identity & Access
Yubico on Tuesday announced the general availability of YubiKey 5Ci, which the company has advertised as the world’s first security key to incorporate both...
Data Protection
Microsoft-owned GitHub on Monday announced that its token scanning service will also check commits for Atlassian, Dropbox, Discord, Proctorio and Pulumi tokens that have...
Data Protection
Google has shared some interesting data collected by the company from users of its Password Checkup extension for Chrome.
Identity & Access
The latest update released by Mozilla for Firefox patches a vulnerability that can be exploited to bypass the master password of the built-in password...
Data Protection
Slack on Tuesday unveiled several new security tools designed to provide administrators of its Enterprise Grid product better control over who can use the...
Identity & Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week published an advisory to warn of multiple vulnerabilities access control systems made by Prima...
Identity & Access
Critical vulnerabilities in enterprise virtual private network (VPN) solutions from Palo Alto Networks, Fortinet and Pulse Secure allow attackers to infiltrate corporate networks, obtain...
Data Protection
Robinhood, a California-based financial services company that provides a popular commission-free stock trading app, informed some users that their passwords were stored in plaintext.
Identity & Access
Biometric Authentication is No Longer Just the Stuff of Spy Movies or Reserved for Military-Grade Installations
Cybercrime
US telecoms company Sprint has informed some customers that their Sprint accounts have been accessed by hackers via a Samsung website.
Data Protection
Hackers can manipulate media files transferred by users through the WhatsApp and Telegram messaging applications due to the way the Android operating system allows...
Endpoint Security
An update released recently by McAfee for one of its products is preventing Windows users from logging on to their systems, and some major...
Application Security
The U.S. Coast Guard on Monday issued a safety alert advising commercial vessel owners and operators to ensure that effective cybersecurity measures are in...
Identity & Access
Researchers noticed that the firmware for some Cisco switches contains X.509 certificates and associated private keys issued to a US-based subsidiary of Huawei. An...
Application Security
Security information and event management (SIEM) solutions provider Exabeam this week announced the acquisition of cloud application security company SkyFormation.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)