Data Protection
Google announced on Thursday the expansion of its certificate authority (CA) efforts with the launch of a root CA that will allow the company...
Hi, what are you looking for?
SecurityWeek
Management & Strategy
Other noteworthy stories that might have slipped under the radar: ICS device exposure remains flat as attack surface widens, Microsoft issues incident response playbook...
Artificial Intelligence
The company topped revenue and earnings forecasts for the first quarter of 2026, but its shares plunged more than 20%.
Cyberwarfare
Securing national resilience now depends on faster, deeper partnerships with the private sector.
Management & Strategy
A summary of the announcements made by vendors on the third and fourth days of the RSAC 2026 Conference.
Email Security
Google’s G Suite team announced on Wednesday that, for security reasons, Gmail will soon stop allowing users to attach JavaScript (.js) files to emails.
Incident Response
Audits
A security researcher who took part in the Hack the Army bug bounty program managed to gain access to an internal Department of Defense...
Cybercrime
The number of data breaches disclosed by organizations in the United States has increased by 40 percent in 2016 compared to the previous year,...
Audits
The Department of Homeland Security (DHS) has made improvements to its information security program, but problems have still been identified in several areas, according...
Compliance
The U.S. Department of Homeland Security has published the National Cyber Incident Response Plan (NCIRP), which aims to describe the government’s approach in dealing...
Management & Strategy
For the 10th anniversary of the Pwn2Own hacking contest, Trend Micro and the Zero Day Initiative (ZDI) have introduced new exploit categories and they...
Malware & Threats
The United States Computer Emergency Readiness Team (US-CERT) has issued a warning after the threat group calling itself Shadow Brokers has offered to sell...
Management & Strategy
President-elect Donald Trump's transition team announced Thursday that former New York mayor Rudi Giuliani "will be sharing his expertise and insight as a trusted...
Data Protection
With Effective Security, Healthcare Organizations Can Take Advantage of Opportunities to Enable Innovation and Growth with Greater Speed, Efficiency, and Agility
Application Security
Trend Micro’s Zero Day Initiative (ZDI) published 674 advisories last year and paid out nearly $2 million to researchers who submitted vulnerabilities, the company...
Cybersecurity Funding
Phantom, a cybersecurity startup that has developed a community-powered security automation and orchestration platform, announced that it has raised $13.5 million in a Series...
Management & Strategy
Fortinet announced on Tuesday said that it has hired former NSA Cyber Task Force Chief, Phil Quade, as Chief Information Security Officer (CISO).
Management & Strategy
Following the Intelligence Community report blaming Russia for both the Democratic National Committee hack in 2016, and for attempting to influence the presidential election...
Audits
A free and open source tool called “Truffle Hog” can help developers check if they have accidentally leaked any secret keys through the projects...
Cyber Insurance
Adopting a cyber security framework provides clear benefits that increase over time; but for most organizations, framework adoption requires overcoming a range of both...
Management & Strategy
The world of cybersecurity is becoming more and more complicated and – some say – almost unmanageable. This is due to the increasing volume...
Management & Strategy
Networking equipment provider Netgear announced on Thursday the launch of a bug bounty program focusing on the company’s products, particularly routers, security cameras and...
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
(Tod Beardsley)
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)