Identity & Access
Researchers at IoT security company ForeScout have created a piece of malware to demonstrate how malicious actors could remotely hack into smart buildings.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Cybersecurity Funding
Cloud-based identity and access management (IAM) provider OneLogin announced that it has raised $100 million in growth financing. The company has now secured over...
ICS/OT
Researchers discovered that a popular building access control system made by IDenticard contains vulnerabilities that can be exploited to create fake badges, disable door...
Compliance
Many TLS certificates for .gov domains have not been renewed due to the ongoing shutdown of the United States government, making them insecure or...
Identity & Access
Reddit this week decided to lock down some user accounts after detecting unusual activity on those accounts.
Identity & Access
Blockchain remains the unfulfilled promise of new technology. Perhaps the problem was the success of Bitcoin's tech -- it made people realize that distributed...
Identity & Access
As we enter 2019, we’re still facing massive cyber-attacks that expose the sensitive data of millions of people and impact businesses both from a...
Funding/M&A
Internet infrastructure giant Akamai Technologies on Monday announced the acquisition of Janrain, a Portland, Oregon-based company specializing in identity and access management (IAM).
Identity & Access
A vulnerability in Skype for Android allows an unauthenticated attacker to view photos and contacts, and even open links in the browser, a security...
Cybercrime
Phishing attacks have become more targeted and sophisticated and also show a focus on enterprises, cloud-based Internet security services provider Cyren says.
ICS/OT
Researchers discovered that some gateways made by Swiss industrial tech company ABB are affected by potentially serious vulnerabilities, but firmware updates will not be...
Data Protection
Cybercrime
Los Altos, California-based startup 4iQ, which describes its self as the "identity intelligence company", this week announced that it has secured $18 million in Series B...
Identity & Access
As we near the end of 2018, another wave of massive cyber-attacks has exposed personally identifiable information belonging to hundreds of millions of people...
Identity & Access
Biometric screening is expanding to the rental car industry.Hertz said Tuesday it is teaming up with Clear, the maker of biometric screening kiosks found...
Identity & Access
The Tor Project, the organization behind the Tor anonymity network, has published financial documents for the past two years, and while they show that...
Cybercrime
Thousands of emails were stolen from aides to the National Republican Congressional Committee during the 2018 midterm campaign, a major breach exposing vulnerabilities that...
Audits
Some machine-to-machine (M2M) protocols can be abused by malicious actors in attacks aimed at Internet of Things (IoT) and industrial Internet of Things (IIoT)...
Identity & Access
Google this week announced the general availability of secure LDAP, after introducing the capability in October at Next ’18 London.Allowing customers to manage access...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)