Data Protection
Open Whisper Systems on Monday announced that the latest beta version of the Signal messaging app includes a new feature that aims to protect...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
ICS/OT
Malicious actors could cause serious damage to organizations in the energy and water sectors by targeting their human-machine interfaces (HMIs), according to a report...
Identity & Access
Google on Monday announced the launch of reCAPTCHA v3, which aims to improve user experience by removing the need for challenges.
Identity & Access
Earlier this month, the State of California made headlines by passing legislation that will require hardware manufacturers to implement unique hardcoded passwords for every...
Data Protection
Mozilla and ProtonVPN this week announced a partnership aimed at keeping users safe while navigating the Internet.
Data Protection
Apple users can now get a copy of the data the tech giant has on them, directly from a refreshed and expanded privacy website...
Identity & Access
Servers using libssh to implement the Secure Shell (SSH) remote login protocol may be vulnerable to attacks due to the existence of an authentication...
Identity & Access
Google on Tuesday released Chrome 70 in the stable channel, with patches for nearly two dozen vulnerabilities, as well as with updated sign-in options.
Identity & Access
Researchers have found several vulnerabilities that can be exploited to take full control of some D-Link routers, and patches do not appear to be...
Identity & Access
Aachen, Germany-based Utimaco has received U.S. regulatory clearance for the acquisition of the Atalla product lines from Micro Focus it first announced in May...
Email Security
The U.S. Department of Homeland Security (DHS) last year ordered government organizations to secure their email and web assets, but many agencies have failed...
Data Protection
A new method that can be used to bypass the iPhone lockscreen and access photos stored on the device was disclosed just days after...
Cloud Security
All major web browsers will deprecate support for the older Transport Layer Security (TLS) 1.0 and 1.1 traffic encryption protocols in the first half...
Data Protection
Google announced this week that it has decided to shut down its Google+ social network. The announcement also revealed the existence of an API...
Application Security
Facebook has shared another update on the hacker attack disclosed last week. The social media giant says there is no evidence that the attackers...
Compliance
Twitter on Monday announced that it has made some changes in preparation for the upcoming midterm elections in the United States. The changes include...
Identity & Access
An iPhone enthusiast has disclosed yet another method for bypassing the iPhone lockscreen. The latest technique has been confirmed to work on the new...
Compliance
Facebook revealed last week that malicious actors may have obtained access tokens for 50 million accounts after exploiting several bugs related to the “Vi
Identity & Access
The PureVPN client for Windows is impacted by two vulnerabilities that result in user credential leak, a Trustwave security researcher has discovered.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)