Identity & Access
A potentially serious vulnerability discovered by researchers in the Zoom video conferencing application can allow external attackers or malicious insiders to hijack screen controls,...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Identity & Access
Security blogger Brian Krebs revealed recently that an API used by the United States Postal Service (USPS) had a vulnerability that potentially exposed the...
Cloud Security
Microsoft has provided information on the root cause of the massive outage that last week impacted its Azure Active Directory authentication services across Europe,...
Cybersecurity Funding
Portland, Ore-based startup Acceptto has emerged from stealth today to launch its cognitive authentication platform and announce an unspecified Series A funding round from...
Cloud Security
Orkus on Monday emerged from stealth mode with a cloud security platform designed to help organizations secure access to data, apps and infrastructure.
Identity & Access
Cybercrime
Software company OSIsoft recently warned employees, interns, consultants and contractors that all domain accounts have likely been compromised as a result of a data...
Cloud Security
Amazon announced this week that a new feature designed to prevent data leaks has been added to Amazon Web Services (AWS).
Identity & Access
Google this week announced new features to G Suite designed to help administrators enforce rigorous password requirements and increase security.
Identity & Access
Important Google services were inaccessible for some users on Monday due to a BGP leak that caused traffic to be directed through Russia, China...
Identity & Access
A security researcher from Tenable, Inc. recently discovered that it is possible to bypass Windows’ User Account Control (UAC) by spoofing the execution path...
Cybercrime
A critical security flaw affecting a GDPR compliance plugin for WordPress has been exploited in the wild to take control of vulnerable websites, users...
Funding/M&A
Minneapolis-based identity firm Entrust Datacard has acquired Barcelona, Spain firm Safelayer Secure Communications. Financial details have not been disclosed.
Identity & Access
A default account present in Cisco Small Business switches can allow remote attackers to gain complete access to vulnerable devices. The networking giant has...
Identity & Access
The relationship between security and user friction remains problematic. Businesses can increase security by strengthening authentication procedures, for example, by requiring multi-factor authentication in...
Funding/M&A
Symantec on Monday announced the acquisition of mobile application security firm Appthority and Active Directory protection company Javelin Networks.
Identity & Access
Security is often perceived as a roadblock to accomplishing business objectives – certainly for good reason – but there exists inevitable conflict. What if...
Identity & Access
Millions of access points and other networking devices used by enterprises around the world may be exposed to remote attacks due to a couple...
Email Security
Google on Wednesday announced several new tools and protection mechanisms designed to help users secure their accounts and recover them in case they have...
Identity & Access
Just hours after Apple announced the availability of a new FaceTime feature in iOS, iPhone enthusiast Jose Rodriguez, known for his YouTube channel videosdebarraquito,...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)