Incident Response
Noteworthy stories that might have slipped under the radar: KnowBe4 product vulnerabilities, SOCRadar responds to hacker's claims, and SEC ends the MOVEit hack probe.
Hi, what are you looking for?
SecurityWeek
Incident Response
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
Artificial Intelligence
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
ICS/OT
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Incident Response
CrowdStrike dismissed claims that the Falcon EDR sensor bug could be exploited for privilege escalation or remote code execution.
Incident Response
After a cybersecurity incident, what should organizations do to learn from it and improve their security posture for the future?
Incident Response
Microsoft is trying to determine “why other airlines were able to fully restore business operations so much faster than Delta.”
Disaster Recovery
CrowdStrike says the Falcon sensor crash that blue-screened Windows machines was caused by a "confluence" of vulnerabilities and testing gaps.
Incident Response
CrowdStrike and Delta are fighting over who is to blame for the airline canceling thousands of flights following the massive outage.
Incident Response
DigiCert has started revoking 83,000 certificates impacted by a validation issue, but critical infrastructure customers are asking for more time.
Data Breaches
OneBlood, a non-profit blood bank serving more than 300 U.S. hospitals, has been hit by a disruptive ransomware attack.
Incident Response
CrowdStrike is facing lawsuits from investors and customers following the incident that caused massive global outages.
Incident Response
DigiCert is immediately revoking many certificates due to a domain validation issue, which could cause disruption to sites, apps and services.
Incident Response
CrowdStrike says 97% of Windows systems impacted by its bad update are back online, just as an insurer predicts billions in losses for major...
Disaster Recovery
CrowdStrike has shared a preliminary incident review, explaining why the update that caused global chaos was not caught by testing.
Incident Response
Delta has canceled more than 5,500 flights since the outage started early Friday morning.
Artificial Intelligence
Canadian cybersecurity startup Protexxa closes a $10 million Series A funding round that brings the total raised to $15 million.
Incident Response
U.S. House leaders are calling on CrowdStrike CEO George Kurtz to testify on widespread tech outage that services around the world.
Disaster Recovery
CrowdStrike tested a new technique to speed up the remediation of systems impacted by the recent bad update.
Endpoint Security
Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool
Microsoft says roughly 8.5 million Windows devices were impacted by the faulty software update from CrowdStrike, and published a tool to help admins through...
Incident Response
CrowdStrike on Saturday provided technical information and remediation guidance to help organizations impacted by the faulty software update that trigged massive IT outages across...
Disaster Recovery
CrowdStrike says a routine sensor configuration update pushed to Windows OS triggered a logic error that blue-screened computers worldwide.
Incident Response
Organizations worldwide are reporting major outages due to Windows system crashes caused by a bad CrowdStrike update.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)