Incident Response
A joint advisory from CISA and the FBI warns about Androxgh0st malware attacks ensnaring devices in a botnet.
Hi, what are you looking for?
SecurityWeek
Incident Response
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
Artificial Intelligence
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
ICS/OT
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Incident Response
Despite the drastically newer and more complex technology, many of the core incident response principles remain the exact same and we should never forget...
Data Breaches
The SEC has provided some important clarifications on its new cyber incident disclosure requirements, which come into effect on December 18.
Data Breaches
MongoDB CISO Lena Smart said the company was not aware of any exposure to the data that customers store in the MongoDB Atlas product.
Incident Response
The court system in Kansas was hit by a cyberattack that caused outages and affected the courts in 104 counties.
Government
A new GAO report reveals that 20 out of 23 US federal agencies have not fully implemented incident response plans.
Incident Response
New Relic said hackers gained access to an environment using social engineering and stolen credentials for an employee account.
Identity & Access
Okta expands scope of October breach, saying hackers stole names and email addresses of all its customer support system users.
Incident Response
Sumo Logic has completed its investigation into the recent security breach and found no evidence of impact to customer data.
CISO Strategy
The Biden for President campaign is looking for a cybersecurity chief to “define the organization's risk appetite” and manage its cybersecurity and IT initiatives.
Incident Response
Patch Tuesday: Redmond’s security response team flags two vulnerabilities -- CVE-2023-36033 and CVE-2023-36036 -- already being exploited in the wild.
Artificial Intelligence
Radiant Security gets $15 million in new financing as investors double down on early stage companies experimenting with AI technology.
Funding/M&A
The Washington, DC startup is building a threat-informed defense platform that helps organizations automate detection and response work.
Incident Response
Offensive Security does not focus on discreet attacks, singular actors, or Indicators of compromise, but understands the entirety of both sides of the battlefield.
CISO Strategy
Industry commentary on the SEC lawsuit against SolarWinds and its CISO over cybersecurity and risk handling practices before the massive hack that came to...
Incident Response
The CVSS vulnerability scoring standard is refreshed to provide more data and remove ambiguities in rating the severity of downstream issues.
Incident Response
MITRE announces the release of ATT&CK v14, which brings enhancements related to detections, ICS, and mobile.
CISO Strategy
The SEC filed charges against SolarWinds and its CISO over misleading investors about its cybersecurity practices and known risks.
Cloud Security
VMware described the bug as an out-of-bounds write issue in its implementation of the DCE/RPC protocol. CVSS severity score of 9.8/10.
Data Protection
Adlumin, a startup working on technology to boost security for mid-market firms, has banked $70 million in new funding led by SYN Ventures.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)