Identity & Access
Cisco has found and patched three critical unauthorized access vulnerabilities in its Digital Network Architecture (DNA) platform.Cisco DNA is a solution that helps enterprises...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Cybersecurity Funding
Identity-as-a-Service (IDaaS) company Auth0
Cybercrime
Just a few days after they were disclosed, malicious actors started targeting a couple of flaws affecting routers made by South Korea-based Dasan Networks....
Audits
A malicious package masquerading as a cookie parsing library but delivering a backdoor instead was unpublished from the npm Registry along with three other...
Identity & Access
Twitter on Thursday warned its users that an internal software bug unintentionally exposed "unmasked" passwords by storing them in an internal log.
ICS/OT
Hackers could in many organizations easily gain access to industrial environments from the corporate network, according to an analysis conducted by Positive Technologies.
Identity & Access
The first time I heard about distributed brute-force login attacks was from master web application firewall (WAF) administrator Marc LeBeau. At the time he...
Cybercrime
Researchers have disclosed the details of two unpatched vulnerabilities that expose more than one million home routers made by South Korea-based Dasan Networks to...
Audits
GitHub has instructed some users to reset their passwords after a bug caused internal logs to record passwords in plain text.
Cloud Security
Microsoft last week unveiled Trusted Cyber Physical Systems (TCPS), a new solution designed to help protect critical infrastructure against modern cyber threats.
Identity & Access
Mozilla announced this week that the upcoming Firefox 60 will introduce support for the same-site cookie attribute in an effort to protect users against...
Identity & Access
Closing Gaps in Credential Security Requires Awareness of What Gaps Exist and How to Mitigate Them
Data Protection
Researchers claim hackers can remotely exploit an unpatched command injection vulnerability to take control of network-attached storage (NAS) devices from LG.VPN specialists at vpnMentor...
Identity & Access
Google this week announced that iOS users can now receive Google prompts via their Gmail application.
Email Security
A vast majority of the companies present this week at the 2018 RSA Conference in San Francisco have not implemented the DMARC email authentication...
Identity & Access
Since the introduction of computers, user names and passwords have been the primary method used for access control and authentication. However, as post-mortem analysis...
ICS/OT
Cisco’s Talos intelligence and research group has reported identifying a total of 17 vulnerabilities in an industrial router from Moxa, including many high severity...
Identity & Access
Web browsers from Google, Microsoft, and Mozilla will soon provide users with a new, password-less authentication standard built by the FIDO Alliance and the...
Identity & Access
Cybercrime
A significant number of Cisco switches located in Iran and Russia have been hijacked in what appears to be a hacktivist campaign conducted in...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)