Incident Response
U.S. authorities are still working to unravel the full scope of the likely Russian hack that gave the “sophisticated” actor behind the breach complete...
Hi, what are you looking for?
SecurityWeek
Incident Response
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
Artificial Intelligence
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
ICS/OT
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Data Protection
Three North Korean Military Hackers Indicted in Wide-Ranging Scheme to Commit Cyberattacks and Financial Crimes Across the Globe
Cybercrime
A major French software firm allegedly targeted by Russian hackers denied Tuesday that its major clients could have been affected by the attack.
Cybercrime
Accellion has formally announced plans to retire FTA, the large file transfer service that was at the heart of several recently disclosed data breaches.The...
Application Security
Improperly generated ISNs (Initial Sequence Numbers) in nine TCP/IP stacks could be abused to hijack connections to vulnerable devices, according to new research from...
Cybercrime
Antivirus solutions provider Emsisoft revealed last week that a third-party had accessed a publicly exposed database containing technical logs.
Cybercrime
The National Cyber Investigative Joint Task Force (NCIJTF) on Friday released a joint-sealed ransomware factsheet detailing common attack techniques and means to ensure prevention...
Cyber Insurance
Atlanta-based packaging giant WestRock (NYSE: WRK) on Friday shared an update on the recent ransomware incident that impacted the company’s information technology (IT) and...
Application Security
In response to speculation that its services may have been leveraged as an initial entry point by the hackers who breached IT management firm...
Cyberwarfare
Cisco this week released software updates to address multiple vulnerabilities across its product portfolio, including critical severity bugs in several small business VPN routers...
Cybercrime
SonicWall on Wednesday announced that it released firmware updates for its Secure Mobile Access (SMA) 100 series appliances to patch an actively exploited zero-day...
Incident Response
Several U.S. lawmakers sent a letter to the National Security Agency last week in an effort to find out more about its role in...
Incident Response
Collaboration is a Hallmark of Successful Security Teams
Cybercrime
Trial lawyer Robert Fisher is handling one of America’s most prominent counterintelligence cases, defending an MIT scientist charged with secretly helping China. But how...
Cloud Security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) says many of the victims of the threat group that targeted Texas-based IT management firm SolarWinds...
Cybercrime
The Perl.com domain, which since 1997 had been serving articles about Perl programming, was hijacked last week.Managed by The Perl Foundation, the site had...
Cybercrime
Chicago-based wireless carrier UScellular started informing customers last week that their personal information may have been accessed and their phone numbers ported as a...
Incident Response
Hackers Are Winning Battles, While Victims are Gaming the Notification Laws
Cybercrime
Following a takedown operation earlier this month, authorities are taking steps towards cleaning up systems infected with the Emotet malware.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)