Incident Response
Atlassian releases security-themed updates to fix several high-severity vulnerabilities in its Bamboo, Confluence and Jira products.
Hi, what are you looking for?
SecurityWeek
Incident Response
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
Artificial Intelligence
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
ICS/OT
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Cybercrime
UnitedHealth booked $1.1 billion in total costs from the cyberattack in the second quarter.
Incident Response
Car dealership AutoNation has informed the SEC that the CDK Global ransomware attack impacted its quarterly earnings.
Application Security
CISA says a SILENTSHIELD red team assessment found gaping holes in the security posture of a federal civilian executive branch organization.
Incident Response
Patch Tuesday: Microsoft patches more than 140 security vulnerabilities in the Windows ecosystem, including a pair of exploited zero-days.
Cybersecurity Funding
Command Zero has emerged from stealth mode with $21 million in a seed funding round led by Andreessen Horowitz.
Data Breaches
Evolve Bank says personal information of more than 7.6 million individuals was compromised in a ransomware attack.
Data Breaches
HubSpot is "actively investigating and blocking attempts” to hack into customer accounts but some targets have already been compromised.
Disaster Recovery
A statewide outage of the Massachusetts 911 system was the result of a firewall that blocked calls from reaching emergency responders.
Artificial Intelligence
The US cybersecurity agency CISA has conducted a tabletop exercise with the private sector focused on AI cyber incident response.
Incident Response
Log tampering is an almost inevitable part of a compromise. Why and how do cybercriminals target logs, and what can be done to protect...
Incident Response
MITRE has shared information on how China-linked hackers abused VMware for persistence and detection evasion in the recent hack.
Incident Response
Intercontinental Exchange, the company that operates NYSE and other exchanges, has agreed to pay a $10 million fine related to a 2021 hack.
Cloud Security
Financial terms were not released but the price tag is expected to be hefty with Exabeam’s most recent valuation pegged at $2.5 billion.
Data Breaches
Tech giant notifies millions of customers that full names and physical mailing addresses were stolen during a security incident.
Artificial Intelligence
Google rolls out new threat-intel and security operations products and looks to the magic of AI to tap into the booming cybersecurity market.
Incident Response
Change Healthcare Cyberattack Was Due to a Lack of Multifactor Authentication, UnitedHealth CEO says
UnitedHealth CEO Andrew Witty said in a U.S. Senate hearing that his company is still trying to understand why the server did not have...
Incident Response
UnitedHealth Group’s CEO Andrew Witty shares details on the damaging cyberattack in testimony before a US Congress committee set for May 1, 2024.
Incident Response
Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.
Funding/M&A
Irish startup Tines raises $50 million in new venture capital funding as investors make big bets on automation and orchestration startups.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)