Identity & Access
According to a survey of 2,600 IT professionals conducted by security awareness training firm KnowBe4, only 38 percent of large companies use multi-factor authentication...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Identity & Access
Identity & Access
The Face ID and Touch ID authentication feature introduced recently to WhatsApp for iOS can be easily bypassed, but a patch has been released.
Identity & Access
Pulse Secure, a company that specializes in secure access solutions, this week unveiled a new software defined perimeter (SDP) product designed to provide organizations...
Application Security
California-based web security company PerimeterX announced on Monday that it raised $43 million in a Series C funding round, which brings the total raised...
Application Security
The Swiss government last week announced the launch of a public bug bounty program for its electronic voting systems, with rewards of up to...
ICS/OT
Thousands of instances of a temperature control system are exposed to remote attacks from the internet due to users’ failure to change default passwords...
Identity & Access
A researcher has disclosed the existence of a zero-day vulnerability in macOS Mojave that can be exploited by malware to steal plaintext passwords from...
Data Protection
The check-in links sent to customers by several major airlines from around the world can allow hackers to obtain passengers’ personal information and possibly...
Identity & Access
Microsoft has updated its Authenticator application to provide users with security notifications whenever suspicious activity is detected on their accounts.
Identity & Access
The Problems With Passwords and MFA on Safer Internet Day
Cybersecurity Funding
Behavioral biometrics solutions provider and Techstars-backed company TypingDNA has raised $1.5 million in seed funding.
Data Protection
The State Bank of India is the latest large organization to leave a database full of personal information exposed and accessible on the internet.
Identity & Access
Security Leaders are Finally Recognizing How Big of a Problem Credential Compromises Are
Identity & Access
Hackers have been scanning the Internet for Cisco Small Business routers affected by information disclosure and command injection vulnerabilities that were patched only days...
Cloud Security
Amazon Web Services (AWS) on Wednesday announced the launch of Amazon WorkLink, a service that enables organizations to provide employees easy and secure access...
Cybersecurity Funding
Identity management solutions provider Keyfactor on Thursday announced that it raised $77 million in a growth funding round with venture capital and private equity...
Audits
The U.S. Department of Homeland Security (DHS) on Tuesday issued an emergency directive instructing federal agencies to prevent and respond to DNS hijacking attacks.
Data Protection
A storage server configured for public access was found to expose terabytes of data belonging to the Oklahoma Department of Securities, UpGuard reveals.
Compliance
The number of US government domains for which TLS certificates were left to expire due to the government shutdown has now exceeded 130, UK-based...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)