Cybercrime
FedEx-owned international delivery services company TNT Express is still working on restoring systems hit last month by the destructive NotPetya malware attack, but some...
Hi, what are you looking for?
SecurityWeek
CISO Strategy
CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag.
CISO Strategy
All enterprises conduct security awareness training for their employees. But whether this has tangible benefits is debatable.
Management & Strategy
Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board.
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Identity & Access
Management & Strategy
It’s Time to Stop Measuring Security Success by Only Internal, Readily-available Metrics
Endpoint Security
Cloud-based endpoint security firm CrowdStrike and Dragos, a company that specializes in protecting industrial control systems (ICS), announced on Tuesday a strategic partnership whose...
Management & Strategy
For a couple of decades now, the career path of a cybersecurity professional has been evolving just like the rest of the tech industry....
Audits
Mozilla has asked Germany-based security firm Cure53 to conduct an audit of the Firefox Accounts system and researchers identified a total of 15 issues,...
Management & Strategy
Digital Transformation is a Massive Undertaking and Must be Entered into With Equal Thought to Security and Business Strategy
Management & Strategy
Being a CISO is not an easy job. It takes a certain type of person who has the right mix of passion, discipline, technical...
Management & Strategy
Tens of Thousands of Internet-Exposed Memcached Servers Are Vulnerable to AttacksTens of thousands of servers running Memcached are exposed to the Internet and affected...
Cyberwarfare
Intelligence and defense policy legislation passed last week shows that the United States government is increasingly concerned about cyberattacks, particularly attacks coming from Russia.
Management & Strategy
Team collaboration and productivity software provider Atlassian announced this week the launch of a Bugcrowd-based public bug bounty program with rewards of up to...
Audits
The assessments conducted by the U.S. Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) in 2016 showed that inadequate boundary protection has remained the...
Management & Strategy
Planning for Cyber Protection and Resiliency is a Large Topic That Requires the Right Framework and a Balance of Strategic and Tactical Thinking
Management & Strategy
Recently, I was thinking about the time during high school when I took a trip to visit my elementary school. I’m not sure why...
Application Security
Organizations made some improvements to their security posture last year, but only marginally, as the average time-to-fix is still too high and remediation rates...
ICS/OT
Many security practitioners in the field of industrial control systems (ICS) believe the level of risk is high, and they are increasingly concerned about...
Cloud Security
Cloud security firm HyTrust today announced that it has acquired data visibility and security company DataGravity, and raised $36 million in a new funding...
Compliance
Google last week warned website owners that digital certificates from Chinese certificate authority WoSign and its subsidiary StartCom will no longer be trusted starting...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)