Cybercrime
Microsoft’s security updates for April 2017 address more than 40 critical, important and moderate severity vulnerabilities, including three zero-day flaws that have been exploited...
Hi, what are you looking for?
SecurityWeek
CISO Strategy
CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag.
CISO Strategy
All enterprises conduct security awareness training for their employees. But whether this has tangible benefits is debatable.
Management & Strategy
Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board.
Artificial Intelligence
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Audits
The Open Web Application Security Project (OWASP) announced on Monday the first release candidate for the 2017 OWASP Top 10, which proposes two new...
Management & Strategy
I love watching reality shows about paramedics. It is thrilling to see the EMTs rush to a scene and take immediate action to save...
Cyberwarfare
The hacker group calling itself “Shadow Brokers” has released another round of exploits and tools allegedly used by the NSA-linked threat actor “Equation Group,”...
Management & Strategy
The use of microservices and containers like Docker have led to a revolution in DevOps. Providing the agility that business have long awaited, these...
ICS/OT
Programmable logic controllers (PLCs) from several major vendors are affected by implementation flaws that can be exploited by attackers to execute arbitrary commands on...
Management & Strategy
April is Stress Awareness Month. With the pace of constantly-evolving threats, budget battles and security apathy from users, it isn’t a stretch to imagine...
Management & Strategy
McAfee Spins Out from Intel as a New Independent Company With Refreshed Logo
Management & Strategy
Google reported last week that its Project Zero Prize contest was not as successful as the company hoped it would be – no valid...
Cyberwarfare
WikiLeaks has released information and source code for a framework allegedly used by the U.S. Central Intelligence Agency (CIA) to make analysis of its...
Management & Strategy
Insider Threats Are a Fact of Life and Are Not Going Away.
Management & Strategy
As a Security Professional, If You’re Not Having Your Work Peer Reviewed You’re Not Doing it Right.
Cybercrime
The Cyber Division of the U.S. Federal Bureau of Investigation (FBI) has issued an alert to warn the healthcare industry that malicious actors are...
Audits
Google is displeased with the fact that Symantec has failed to ensure that its partners don’t improperly issue digital certificates, which is why the...
Management & Strategy
Ah, RSAC 2017. Into the bowels of Moscone, I dove. Submerged in a calliopean frenzy of schwag hawkers and “where the world talks security”...
Management & Strategy
By Working Together and Sharing Missteps, Defenders Can Gain Crucial Security Insights and Prevent the Spread of Attacks
Incident Response
Cisco has warned customers that the Vault 7 files obtained by WikILeaks contain information on a critical vulnerability affecting many of the company’s switches....
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)