Identity & Access
The National Security Agency last week issued guidance on the risks associated with wildcard TLS certificates and Application Layer Protocols Allowing Cross-Protocol Attacks (ALPACA)...
Hi, what are you looking for?
SecurityWeek
Management & Strategy
Companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.
Compliance
(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of...
Management & Strategy
Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.
Management & Strategy
Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.
Cyber Insurance
A total of nine cybersecurity-related acquisitions were announced in the first 10 days of October 2021.
Cybercrime
Most Americans across party lines have serious concerns about cyberattacks on U.S. computer systems and view China and Russia as major threats, according to...
Identity & Access
The United States Cybersecurity and Infrastructure Security Agency (CISA) last week announced the release a new guidance document: Trusted Internet Connections (TIC) 3.0 Remote...
IoT Security
Medical device maker Medtronic is recalling remote controllers used with some of its insulin pumps due to cybersecurity risks that could lead to injury...
Application Security
Microsec.ai on Tuesday emerged from stealth mode to deliver a Cloud Native Application Protection Platform (CNAPP) solution designed to protect cloud-native applications at runtime.The...
Cybersecurity Funding
Enterprise data fusion and analytics company Gravwell emerged from stealth mode with $3 million in seed funding.
Data Protection
Mozilla this week released Firefox 93 to the stable channel with several security improvements, including better privacy protections, patches, and anti-tracking capabilities.Starting with Firefox...
Audits
Many Kansas school districts aren’t taking basic steps to protect their computer systems and the privacy of sensitive information collected about students, according to...
Cybercrime
Superheroes may be able to save everyone in a fantasy world, but they can’t keep online accounts secure in the digital era, Mozilla warns.With...
Cloud Security
Cloud security company Orca Security on Tuesday announced that it has raised $550 million in an extended Series C funding round, at a valuation...
Management & Strategy
Arizona Gov. Doug Ducey has launched a Cyber Command Center that will deal with threats to government computers.At a ceremony Monday at the Department...
Cybersecurity Funding
Privacy-focused data collaboration solutions provider Duality Technologies today announced that it has raised $30 million in Series B funding. To date, the company has...
Cloud Security
Major cloud services providers last week formally introduced the Trusted Cloud Principles, an initiative aimed at bringing standardization and consistencies across platforms.
Cyber Insurance
Syniverse, a company whose connectivity services are used by nearly all mobile carriers in the world, said hackers had access to its information technology...
Identity & Access
A root certificate used by Let’s Encrypt expired on September 30 and, despite being notified a long time in advance, many companies experienced problems.
Cybercrime
Computer systems are being restored in Pottawatomie County are after hackers launched a ransomware attack on Sept. 17, county officials said Friday.The county resolved...
M&A Tracker
The number of cybersecurity-related mergers and acquisitions announced in the past months has remained constant, with roughly 40 deals announced in September 2021 as...
Application Security
Google last week pledged $1 million in financial support to the Secure Open Source (SOS) rewards program run by the Linux Foundation.The pilot program...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)