Cybercrime
Identity-based attacks have soared in the past year, according to CrowdStrike’s 2023 Threat Hunting Report.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Identity & Access
SpecterOps announces version 5.0 of BloodHound Active Directory mapping tool with enterprise-grade deployment, usability, and UI.
Identity & Access
Proton makes its open source Proton Pass password manager globally available for major browsers and mobile devices.
Funding/M&A
New York startup scores early stage financing to build new technology to replace virtual desktop infrastructure.
Cybersecurity Funding
Astrix Security raises $25 million in Series A funding for its solution designed to help enterprises secure non-human identities.
Funding/M&A
Identity verification solutions provider Socure has acquired automated ID verification firm Berbix for roughly $70 million in cash and stock.
Government
CISA’s Binding Operational Directive 23-02 requires federal agencies to secure the network management interfaces of certain classes of devices.
Government
US and Israeli government agencies have published new guidance on preventing malicious exploitation of remote access software.
Identity & Access
Google Workspace now offers support for passwordless authentication using passkeys, in beta.
Identity & Access
PyPI will require all accounts that maintain a project to enable two-factor authentication (2FA) by the end of 2023.
ICS/OT
Secure remote access is essential for industrial organizations, but many are concerned about the associated risks, a new study shows.
Identity & Access
Google has added passkeys support to Google accounts on all major platforms as part of the company’s passwordless sign-in efforts.
Cybersecurity Funding
Cybersecurity startup Sonet.io emerges from stealth mode with $6 million in seed funding and a secure access solution for remote workers.
Funding/M&A
Seattle startup SpecterOps secures $25 million in Series A funding to boost its BloodHound Enterprise platform.
Identity & Access
Webinar on third-party identity access risks will discuss topics such as unauthorized access, data breaches, and the manipulation or theft of sensitive information
Identity & Access
New CISA and NSA guidance includes recommended best practices for identity and access management (IAM) administrators.
Fraud & Identity Theft
443ID is refocusing its solution to tackle account fraud detection and prevention, and has changed its name to Verosint.
Identity & Access
NSA publishes recommendations on maturing identity, credential, and access management capabilities to improve cyberthreat protections.
Funding/M&A
AI-driven identity verification platform Vouched has raised $6.3 million in a funding round led by BHG VC and SpringRock Ventures.
Identity & Access
Twitter started a security ruckus over the weekend with the sudden decision to turn off text message/SMS method of two-factor authentication (2FA) for non-subscribers.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)