Data Protection
New Solutions from IBM Help Customers Detect, Prevent and Respond to Cyber Attacks IBM on Monday unveiled a suite of security software and services...
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Network Security
Symantec unfurled a roadmap for a mix of product integrations and managed services the firm hopes will its customers battle sophisticated threats.
Cloud Security
LONDON - Infosecurity Europe – The Cloud Security Alliance (CSA), a not-for-profit organization which promotes the use of best practices for providing security assurance within cloud computing, announced...
Network Security
Attackers are exploiting a recently disclosed zero-day vulnerability in Internet Explorer in campaigns targeting Windows XP users, FireEye researchers have found.
Application Security
Information security is a big topic with a lot of disciplines, and hardly anyone is an expert in all of them. The good news...
Application Security
The recently-disclosed Heartbleed vulnerability has forced many system administrators to promptly patch affected servers. That was just the easy part. The hard work lies...
Data Protection
Researchers from FireEye have discovered a nasty zero-day exploit that bypasses the ASLR and DEP protections in Microsoft Windows and is being used in targeted...
Network Security
SAO PAULO - The Google executive considered to be one of the fathers of the Internet on Thursday debunked what he called the "myth"...
Network Security
Technology Giants Aim to Secure Critical Open Source Projects Through ‘Core Infrastructure Initiative’ via The Linux FoundationIndustry heavyweights including Microsoft, Google, Intel, and Cisco...
Network Security
SAO PAULO - Brazil's President Dilma Rousseff took aim at US dominance of the Internet Wednesday, appealing at an international meeting for global governance...
Network Security
Networking giant Cisco Systems has announced a new managed security solution that applies real-time, predictive analytics to detect attacks and protect customers from advanced...
Application Security
After details of the critical “Heartbleed” vulnerability in OpenSSL emerged earlier this month, there has been widespread concern among system administrators, network security teams,...
Cybercrime
Point-of-sale (PoS) attacks are declining, while Web application attacks and cyber-espionage is increasing, according to the latest edition of the annual Verizon Data Breach...
Cybersecurity Funding
Damballa, a provider of threat protection and containment solutions, has raised $13 million to capitalize on growing demand for its automated breach defense platform.
Network Security
Ben-Gurion University of the Negev (BGU) announced that it has signed a $8.5 million agreement with the Israel National Cyber Bureau to develop CyberSpark,...
Network Security
Attackers Exploit Heartbleed Vulnerability to Circumvent Multi-factor Authentication on VPNs and Hijack Active User Sessions
Network Security
Akamai Publishes Prolexic Q1 2014 Global DDoS Attack Report Attackers are shifting away from traditional botnet-based distributed denial of service (DDoS)attacks in favor of...
Network Security
There has been significant chatter recently about threat intelligence management – specifically how a platform for managing such should be defined. Two industry analysts,...
Network Security
The sad truth is that the security practice lags behind pretty much every other IT discipline when it comes to automation. • Need to...
Network Security
WASHINGTON - US officials announced Thursday that companies sharing information about cybersecurity would not face prosecution on antitrust grounds. The news came amid heightened...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)