The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders.
Hi, what are you looking for?
SecurityWeek
Identity & Access
The identity security company beat quarterly expectations and raised its outlook as enterprises face growing pressure to secure AI agents and other non-human identities.
Identity & Access
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
Identity & Access
When Android users get a call from a non-contact, they will see more information about the caller, including their country.
Identity & Access
Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.
Artificial Intelligence
New York identity management startup raises $36 million in an unusually large seed round co-led by Team8 and Intel Capital.
Identity & Access
Oasis Security has disclosed AuthQuake, a method for bypassing Microsoft MFA within an hour without user interaction.
Funding/M&A
Tel Aviv company building software to secure non-human identities banks a $45 million funding round led by Menlo Ventures.
Identity & Access
Microsoft has rolled out new default security protections that mitigate NTLM relaying attacks across on-premises Exchange, AD CS, and LDAP services.
Cloud Security
Starting this month, Google Cloud will be rolling out mandatory MFA for all users who sign in with a password.
Identity & Access
FIDO Alliance has published new specifications for securely moving passkeys across providers, as Amazon announced 175 million passkey users.
Identity & Access
Multi-factor authentication is a necessary safeguard, but its limitations show why organizations can't rely on it alone to prevent breaches.
Cloud Security
Credentials are still the most common entry point for bad actors, even as businesses deploy multi-factor authentication (MFA) to strengthen defenses.
Artificial Intelligence
That dream of a decentralized privacy-retaining identity system able to combat AI-driven bots and deepfakes may not be as elusive as feared – courtesy...
Identity & Access
Five Eyes cybersecurity agencies have released joint guidance on identifying Active Directory compromises.
Identity & Access
Users can now save passkeys to Google Password Manager on computers running Windows, macOS, and Linux, in addition to Android devices.
Cybersecurity Funding
Hydden has raised $4.4 million in seed funding for a solution designed to provide deep visibility into identities, accounts and privileges.
Cybersecurity Funding
Aembit has raised $25 million in Series A funding to protect non-human identities and minimize attack surface.
Identity & Access
YubiKey security keys can be cloned via a side-channel attack that leverages a vulnerability in a cryptographic library.
Identity & Access
GitHub patches a trio of security defects in the GitHub Enterprise Server product and recommends urgent patching for corporate users.
Cloud Security
Microsoft is implementing automatic enforcement of multi-factor authentication (MFA) for all Azure users starting October.
Identity & Access
While ZTNA can be deployed independently, it is an integral component of the SASE architecture as well.
Black Hat
SaaS app log analysis highlights the rapid smash and grab raid: in, steal, and leave in 30 minutes.
Funding/M&A
TechOperators leads a $6 million Series A funding round for Evo Security, a provider of IAM solutions for MSPs.
Compliance
New York startup with roots in Israel banks a hefty $33 million early stage funding round.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)