Cloud Security
Microsoft late Tuesday pushed out an emergency patch to cover the Windows ‘PrintNightmare’ security flaw.
Hi, what are you looking for?
SecurityWeek
Incident Response
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
Artificial Intelligence
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
ICS/OT
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Cybercrime
British Airways has settled a class action brought by individuals impacted by the data breach suffered by the company in 2018, but terms of...
Cyber Insurance
In the past few weeks, ransomware criminals claimed as trophies at least three North American insurance brokerages that offer policies to help others survive...
Cybercrime
IT management software maker Kaseya on Monday said the recent ransomware attack impacted up to 1,500 organizations, but claimed there was no evidence of...
Cybercrime
Cybersecurity teams worked feverishly Sunday to stem the impact of the single biggest global ransomware attack on record, with some details emerging about how...
Cybercrime
Supply chain cyberattack could have wide blast radius through compromised MSPs
Application Security
An unknown threat actor has compromised the servers of Mongolian certificate authority (CA) MonPass and abused the organization’s website for malware distribution, according to...
Cloud Security
Microsoft late Thursday acknowledged a severe security vulnerability in the Print Spooler utility that ships by default on Windows and warned that the bug...
Audits
Secure Access Service Edge (SASE) provider Versa Networks this week announced it raised $84 million in Series D funding. To date, the company has...
Application Security
Security researchers at Microsoft are flagging multiple gaping security holes in firmware shipped on NETGEAR routers, warning that exploitation could lead to identity theft...
Application Security
IBM Corp. on Wednesday announced that it is contributing the Kestrel open-source programming language for threat hunting to the Open Cybersecurity Alliance (OCA).
Cybercrime
Personal news reader NewsBlur was down for several hours last week after a hacker managed to wipe the service’s database.The hacker was able to...
Application Security
Google this week announced a security update for Google Drive that is meant to make sharing links more secure for files stored with the...
Application Security
Security researchers at Eclypsium have figured out a way to exploit a set of high-severity vulnerabilities that expose millions of Dell computers to stealthy...
Endpoint Security
Updated MDR solution continuously analyzes customer traffic for attributes that might disclose a threat
Cyber Insurance
If your business falls victim to ransomware and you want simple advice on whether to pay the criminals, don’t expect much help from the...
Cybercrime
Officials at Vermont’s largest hospital are still trying to determine the full financial impact of the cyberattack last October that knocked out computers affecting...
Cloud Security
CDN, cybersecurity and cloud services provider Akamai has blamed an outage that occurred on Thursday on an issue with its Prolexic DDoS attack protection...
Application Security
Google wants to bring “salsa” to drive enforcement at the software supply chain security party.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)