Cloud Security
A threat actor is reportedly harvesting IAM credentials from public GitHub repositories within five minutes of exposure.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Identity & Access
One of the main reasons why ZTNA fails is that most ZTNA implementations tend to focus entirely on securing remote access.
Cybercrime
A 20-year-old Floridian was sentenced to prison for his role in a hacking scheme that led to the theft of $1 million in cryptocurrency.
Identity & Access
SolarWinds patches high-severity flaws in its Access Rights Manager product, including three unauthenticated remote code execution issues.
Data Breaches
Okta warns that hackers broke into its support case management system and stole sensitive data that can be used to impersonate valid users.
Fraud & Identity Theft
Startup with roots in the ecommerce mobile payments space raises $40 million for digital identity verification and authentication technology.
Cybersecurity Funding
Anonybit has raised $3 million in seed funding extension for its biometric authentication and data protection solutions.
Identity & Access
Microsoft is adding new features to the Kerberos protocol, to eliminate the use of NTLM for Windows authentication.
Government
New US government guidance details the challenges that application developers and vendors face in identity and access management (IAM).
Identity & Access
The Linux Foundation has announced OpenPubkey, an open source cryptographic protocol that should help boost supply chain security.
Identity & Access
ZTNA stands out as a solution that enables organizations to minimize their attack surface while ensuring the productivity and security of their remote workforce.
Government
CISA has released new guidance on how federal agencies can integrate identity and access management into their ICAM architecture.
Cloud Security
Maryland startup scores $8.5 million in seed-stage funding to compete in the Identity Threat Detection and Response (ITDR) category.
Identity & Access
Okta says some of its US-based customers have been targeted in social engineering attacks whose goal was to disable MFA and obtain high privileges.
Endpoint Security
NEWS ANALYSIS: Redmond plants its feet firmly in the enterprise browser space, sending major ripples through Silicon Valley's bustling venture-backed startup ecosystem.
Funding/M&A
The private equity firm merges the newly acquired ForgeRock with Ping Identity, combining two of the biggest names in enterprise IAM market.
Cloud Security
Israeli startup Grip Security has banked $41 million in new financing from a group of investors led by Third Point Ventures.
Cybersecurity Funding
Cerby has raised $17 million in Series A funding for its access management platform for applications not supported by identity providers.
Identity & Access
CISA has published a cyber defense plan outlining strategies to help critical infrastructure organizations reduce the risks associated with RMM software.
Identity & Access
Google has released the first quantum-resilient FIDO2 security key implementation as part of its OpenSK project.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)