Incident Response
Encrypted instant messaging app Signal was hit by a brief outage late Sunday that interrupted services on the platform at the same time as...
Hi, what are you looking for?
SecurityWeek
Incident Response
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
Artificial Intelligence
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
ICS/OT
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Application Security
Cyber insurance is a new branch of an old industry. That industry has centuries of experience in insuring shipping and a hundred or more...
Cyber Insurance
The Alaska health department has shared more information about the cyberattack detected earlier this year, and the organization says the attack was conducted by...
Endpoint Security
As adversaries changed their view of an attack to include vectors across an organization, defenders have had to evolve their approach as well. This...
Application Security
Microsoft on Tuesday shipped a major security update to blunt zero-day attacks targeting a gaping hole in its proprietary MSHTML browsing engine.
Application Security
Cisco this week released patches for multiple high-severity vulnerabilities in the IOS XR software and warned that attackers could exploit these bugs to reboot...
Application Security
CISA and OMB this week announced they are seeking public feedback on draft zero-trust strategic and technical documentation.
Application Security
Howard University closed its physical campus and canceled classes this week after experiencing a ransomware attack.
Cloud Security
Google on Tuesday published the Android Security Bulletin for September 2021 with patches for a total of 40 vulnerabilities, including seven that are rated...
Application Security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued new guidelines for government and private organizations to take into consideration when looking to...
Application Security
Microsoft’s embattled security response unit is scrambling to deal with another zero-day attack hitting users of its flagship Microsoft Office software suite.
Incident Response
A prevention-only strategy to combat threats is not sufficient; enterprises must incorporate intelligence from all relevant intelligence domains
Cybercrime
T-Mobile’s CEO and an individual who claims to be behind the recent hacking of the mobile carrier’s systems have shared some information about how...
Cybercrime
A small Swiss town acknowledged late Wednesday that it had underestimated the severity of a cyberattack, following reports the personal data of the entire...
Cybersecurity Funding
Incident response company BreachQuest emerged from stealth mode on Wednesday with $4.4 million in seed funding from Slow Ventures, Tinder founders Sean Rad and...
Application Security
United States-based Nokia-owned SAC Wireless has started sending notification letters to its current and former employees to inform them of a data breach that...
Cybersecurity Funding
Extended detection and response (XDR) company Hunters on Tuesday announced raising $30 million in a Series B funding round, which brings the total raised...
Compliance
Class action lawsuits have been filed against T-Mobile over the recently disclosed data breach that has been confirmed to impact more than 50 million...
Data Protection
JPMorgan Chase Bank last week sent out notification letters to inform customers that their personal information might have been inadvertently exposed to other customers.
Cybercrime
The number of T-Mobile customers confirmed to be affected by the recent hacker attack has reached more than 54 million, the wireless operator said...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)