Identity & Access
Mobile phone-based two-factor authentication (2FA) mechanisms are plagued by synchronization vulnerabilities that allow attackers intercept One-Time Passwords (OTPs) and bypass the security of many...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Application Security
A group of security researchers has discovered vulnerabilities in the reCaptcha systems of Google and Facebook, and have created an attack that is highly...
Identity & Access
Passive Authentication May be the Future for User Authentication, and it's Just Beginning to Appear
Identity & Access
Microsoft has patched a serious authentication vulnerability that could have been exploited to gain access to Outlook, Azure and Office accounts, a researcher reported...
Identity & Access
Tor Urges Sites to Switch CDNs After CloudFlare Says Most Traffic Is Malicious
Identity & Access
The horrific news of the attacks in Belgium last week have resulted in predictable calls for increased security by pushing the perimeter back to...
Identity & Access
Yahoo has expanded its password-free approach to user security to more applications for Android and iOS devices, namely Yahoo Finance, Fantasy, Messenger, and Sports.
Identity & Access
One in five employees are willing to sell their work passwords to an outsider, in many cases for less than $1,000, according to a...
Identity & Access
Enterprises Must Monitor Their Entire Digital Shadow in Order to More Accurately Identify Specific Risks as They Unfold
Identity & Access
Security firm Rapid7 has conducted a year-long study to find out which are the usernames and passwords most commonly used by malicious actors in...
Identity & Access
“I trust everyone. It’s the devil inside them I don’t trust.” - Stella, The Italian Job
Identity & Access
Instagram, Facebook’s mobile photo-sharing and video sharing service, is finally getting a long requested security feature...two-factor authentication.
Identity & Access
Tens of thousands of digital video recorders (DVRs) used to store footage captured by surveillance cameras can be easily accessed by remote hackers because...
Identity & Access
Voice over Internet Protocol (VoIP) phones have become increasingly popular, but many users fail to properly secure them, allowing hackers to compromise the devices...
Identity & Access
Intel’s 6th Generation Intel Core™ vPro™ Processors Add Hardware-based Authentication Features
Identity & Access
Like Many Compliance-driven Efforts, Access Certifications are Often Hastily Implemented to Satisfy Auditors...
Compliance
Like Many Security Technologies, Access Governance Won't Directly Drive More Revenue for a Business. So How Can You Deliver a Return on Governance?
Identity & Access
For the past several months, Dell has been shipping new desktop and laptop computers with a preloaded self-signed root certificate which, according to experts,...
Identity & Access
Application Security
Hackers breached the systems of anti-adblocking solutions provider PageFair and used the access to deliver malware via the publishers that rely on the company’s...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)