Management & Strategy
Evaluating Security Tools - A Proof of Concept Can be Costly, But in the Long-term Could Save You Money and Your Job...
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Network Security
Barracuda Networks announced the immediate availability of Barracuda Firewall version 6.5, the latest release of its next-generation firewall designed for the mid-market. According to...
Network Security
Unified security management solutions provider AlienVault has updated its Open Threat Exchange (OTX), the company's open, crowdsourced threat intelligence sharing system.
Network Security
Many Security Operations Centers (SOCs) find themselves inundated with and overwhelmed by large volumes of false positives, non-actionable alerts, and noise. People often ask...
Management & Strategy
Media reports affirm that malicious insiders are real. But unintentional or negligent actions can introduce significant risks to sensitive information too. Some employees simply...
Network Security
Growing up, one of my father’s favorite sayings was “luck favors the prepared.”
Management & Strategy
In 2011, Lockheed Martin analysts introduced a seven step intelligence-driven process generally used by bad actors, and called it the “cyber kill chain”. For...
Network Security
SafeNet has launched a new suite of high-speed encryption (HSE) solutions designed to help organizations protect sensitive data moving across corporate networks and data...
Network Security
Cisco has addressed a cross-site scripting (XSS) vulnerability affecting the Web management interface of Cisco AsyncOS, the operating system used for some of the...
Network Security
Editor’s Note: The following is a preview for an upcoming panel session at SecurityWeek’s Suits and Spooks Conference taking place in New York City on...
Network Security
As I discussed in my previous column entitled “Understanding The Challenges In Information Sharing”, information sharing is an integral part of a mature security...
Cybercrime
A sophisticated cyber espionage group apparently tied to a Chinese military unit has been targeting organizations in the United States government, research, defense and...
Network Security
Cyber threat protection firm FireEye has officially rolled out option to add an integrated intrusion prevention system (IPS) to its Network Threat Prevention Platform.
Network Security
SSL encryption, especially services using OpenSSL, was brought into the spotlight more than ever this year.
Network Security
Tripwire has released a free Python script that’s designed to help organizations determine if their servers are affected by the recently patched Man-in-the Middle...
Network Security
Organizations Need to Look at Their Security Model Holistically and Gain Continuous Protection and Visibility Along the Entire Journey...
Network Security
NGFW and UTM Market Predicted to Top $5 Billion by 2018
Network Security
The Defense Advanced Research Projects Agency (DARPA) revealed on Tuesday that the final competition for its automated security systems development challenge will take place...
Cybersecurity Funding
Israel-based enterprise security intelligence startup Fortscale has secured $10 million in a funding round led by Blumberg Capital and Intel Capital. According to the...
Malware & Threats
Report Details How Attackers Can Mask Dangerous Threat Activity
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)