Identity & Access
The Network Level Authentication (NLA) feature of Windows Remote Desktop Services (RDS) can allow a hacker to bypass the lockscreen on remote sessions, and...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Data Protection
Apple announced on Monday at its 2019 Worldwide Developers Conference (WWDC) a new authentication system that should provide better privacy protections compared to similar...
Identity & Access
As organizations become more and more digitally connected, concerns about secure access seem to loom larger than ever. With more users connecting to more...
Cybersecurity Funding
AttackIQ, a California-based company that specializes in continuous security validation, on Wednesday announced that it raised $17.6 million in a Series B funding round,...
Data Protection
The website of financial services company First American Financial until recently exposed hundreds of millions of documents containing sensitive information, security blogger Brian Krebs...
Data Protection
Microsoft-owned social media giant LinkedIn has once again put user data and privacy at risk by allowing a TLS certificate to expire.
Cybersecurity Funding
Identity-as-a-Service (IDaaS) company Auth0 this week announced the close of a $103 million Series E funding round led by Sapphire Ventures, at a valuation...
Identity & Access
Google announced on Wednesday that it’s offering a free replacement for its Titan Security Key dongles following the discovery of a potentially serious vulnerability.
Cybersecurity Funding
Evident ID, an Atlanta-based company that specializes in identity and credential verification, on Thursday announced that it raised $20 million in a Series B...
Cloud Security
Most companies are planning to move to, or adopt, cloud solutions for their privileged access management (PAM) deployments, at least according to a new...
Cybercrime
Cybercriminals have been wiping GitHub, GitLab and Bitbucket repositories and asking their owners to pay a ransom to recover the data. The impacted Git...
Cybercrime
Software giant Citrix has shared more information about the recent data breach and it appears the hackers had access to the company’s network for...
Cybercrime
A majority of the 2020 U.S. presidential campaigns are vulnerable to sophisticated email attacks as they have failed to implement DMARC and advanced security...
Cloud Security
Researchers have stumbled upon an unprotected database storing information on the individuals living in roughly 80 million households in the United States.
Identity & Access
Vulnerabilities discovered by a researcher in a peer-to-peer (P2P) system named iLnkP2P expose millions of cameras and other Internet of Things (IoT) devices to...
Endpoint Security
Microsoft this week announced a series of changes to the security baseline in Windows 10, including the removal of the password-expiration policy from the...
Identity & Access
1992 was both an ending and a beginning. It was the year I lost my beloved grandfather, and I’ll never forget his final words...
Identity & Access
Every year, thousands of companies are breached and billions of data records exfiltrated by cyber adversaries, leading in extreme cases to business closures, geopolitical...
Identity & Access
A recent survey from the UK's National Cyber Security Centre (NCSC, part of GCHQ), conducted by Ipsos Mori, suggests that 52% consider their most...
Data Protection
Google on Thursday announced that it will soon block login attempts from embedded browser frameworks in an effort to prevent man-in-the-middle (MitM) phishing attacks.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)