Identity & Access
Today's security consensus is that password-based authentication and access is insecure, and that some form of two- or multi-factor authentication is necessary. The simplest...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Identity & Access
A vulnerability in OAuth 2.0 could result in an attacker being able to sign into a victim’s mobile app account and take control of...
Identity & Access
Passwords. The favorite topics of security pundits. This fundamental component of security is one of our favorite things to talk about, hypothesize about, and...
Identity & Access
Password proliferation is bad, for many, many, many reasons. But the worst reason is that people tend to re-use passwords all over the place.
Identity & Access
Amazon has prompted some of its customers to reset their passwords after learning that these might have been used to secure other online accounts...
Identity & Access
Recent reports of fraudulent account creation by employees at large banks to generate a boost in fees have raised many questions. How can such...
Email Security
Users resetting their Yahoo! passwords might also want to check the list of authorized apps and devices, because iOS Mail will continue to have...
Identity & Access
Please join Centrify and SecurityWeek for a live webinar today at 1PM ET,
Application Security
Following a series of high profile high value attacks against a number of banks using the SWIFT interbank financial messaging system, Illusive Networks has announced SWIFT...
Identity & Access
Live Webinar: Tuesday, Sept. 27th at 1PM ET
Identity & Access
Identity & Access
Remember when sushi was exotic? Has it been a while since you thought of it as cold dead fish? That was probably before it...
Identity & Access
UnifyID Uses Machine Learning and Behavioral Characteristics to Authenticate Users
Identity & Access
HSBC bank has become the latest financial institution to adopt smartphone-based biometrics as a form of user authentication. Institutions already doing so include MasterCard...
Identity & Access
Three of today's biggest IT evolutions are digital transformation; a move from binary-based to probability-based security; and the search for a single seamless fabric...
Identity & Access
Researchers with the University of North Carolina at Chapel Hill have demonstrated a new method of successfully bypassing modern face authentication systems.
Identity & Access
Towards the end of July 2016, the National Institute of Standards and Technology (NIST) started the process of deprecating the use of SMS-based out-of-band...
Identity & Access
Products from Apple, Microsoft, Oracle and possibly other major companies are affected by a vulnerability that exposes connections made via a proxy server to...
Identity & Access
Microsoft has released yet another patch for a serious Windows authentication bypass vulnerability first disclosed by researchers nine months ago.
Identity & Access
An issue affecting Microsoft’s Windows operating system could result in leaked user credentials if Internet Explorer and Edge are being used, researchers discovered.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)