Network Security
Network Solutions says it has bounced back from a distributed denial-of-service attack that took down some of the websites it hosts for hours.
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Malware & Threats
The ability to travel back in time has captured the imaginations of generations around the world for hundreds of years. One of the more...
Network Security
Cyber Attacks Hitting Global Stock Exchanges are Putting Financial Markets At Risk, According to a New Idustry Report A "significant" number of stock exchanges have...
Nation-State
SEOUL - South Korea on Tuesday blamed North Korea for a crippling cyber attack last month against government and media websites, including the president's...
Cloud Security
While many organizations today are looking to build private cloud infrastructures in-house, the reality is that the majority will end up with a hybrid...
Cloud Security
As the use of Secure Shell (SSH) keys and related encryption services evolves and expands, security experts question what drives that evolution and are...
Cloud Security
TALLINN - IT hub Estonia on Wednesday urged the European Union to rely less on US firms for "cloud" data storage, amid tensions over...
Network Security
Businesses and government agencies are a popular target for attackers looking to steal information and destroy networks, and they are woefully unprepared to deal...
Cybercrime
Steven Spielberg certainly knows how to leave an indelible impression. So much so that when I see the words “DDoS attacks,” I also see...
Network Security
I recently wrote in this space about the rise of the phrase “continuous monitoring” and the confusion it causes. In a nutshell, federal organizations,...
Malware & Threats
Traditional Security Technologies Focus on Detecting Strong Indications of Compromise, but Can’t Identify Weaker Indications of Compromise...
Audits
In a survey of CIOs, system administrators, and compliance auditors, SANS Institute found that the awareness of the Critical Security Controls is very high,...
Cloud Security
In a previous SecurityWeek column, I wrote about the security considerations for software defined networking (SDN). Whether or not SDN becomes the next evolution...
Endpoint Security
Barracuda Web Filter Appliances Get 10 GbE Interfaces for Added Capacity Barracuda Networks announced the availability of new 10 GbE interfaces for some models...
Application Security
In my previous SecurityWeek column, I wrote about Managing Security with the Business in Mind and discussed briefly the importance of taking an application-centric...
Network Security
Trustwave this week unveiled new security information and event management (SIEM) software designed to help businesses better defend against security threats that put sensitive...
Application Security
Risk I/O, a vulnerability intelligence platform designed to help organizations efficiently report and mitigate security vulnerabilities, on Wednesday announced that it now analyzes real-time,...
Malware & Threats
Modern cyberattacks and APTs (advanced persistent threats) have quickly become a top priority for both security practitioners and C-level executives, and for good reason.
Network Security
EiQ Networks, a provider of security, risk and compliance solutions, this week announced ThreatVue, a security monitoring solution that automates the analysis of essential...
Identity & Access
Cisco is revamping its security ecosystem to increase the focus on its Identity Services Engine, which would help enterprises deploy layered defenses without increasing...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)