Application Security
The recent increase in the number and severity of cyber attacks around the world demonstrate that we’re squarely in an era referred to as...
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Network Security
A DDoS Attack of Just 2Gbps Can Knock Most Websites OfflineOrganizations hoping distributed denial of service (DDoS) attacks are no longer incidents du jour...
Cybercrime
THE HAGUE - More than 10 million Dutch citizens were unable to use their official online signature to pay bills and taxes because of...
Network Security
Related Coverage: Financial Cybercime and Cyberespionage Dominate Threat Landscape, Verizon DBIR
Network Security
China and DDoS attacks were the two biggest security threats that organizations had to fend off during the last quarter of 2012, Akamai Technologies...
Application Security
"Effective Security is about Solving problems, Not Chasing Hype..."
Cybercrime
Large-scale financial cybercrime and state-affiliated espionage dominated the security landscape in 2012, Verizon said in its latest data breach report.
Network Security
Massive DDoS Attacks Are Overwhelming Appliances, ISPs, Carriers, and Content Delivery Networks. Prolexic Technologies, a provider of DDoS attack mitigation solutions, recently released its...
Network Security
No matter which way you slice and dice the numbers, the data center is typically one of the most costly items within an enterprise...
Network Security
If Threat Information is Available But not Fully and Effectively Utilized, Then Knowledge is Not Power
Network Security
Tenable Network Security, a provider of network security and vulnerability management solutions, on Thursday announced new real-time security and compliance intelligence capabilities for its...
Network Security
Trust is the Foundation of all Relationships. When Trust is Compromised, Business Stops.
Network Security
AlienVault, the company behind open source SIEM, OSSIM, today announced that its Unified Security Management (USM) suite is now available as a virtual appliance.
Cybercrime
Advanced Threat Protection & Visibility Series – Part 3: Hacktivists
Application Security
Last week, reports surfaced of brute force attacks targeting a large number of WordPress blogs scattered across the Internet. The attacks are still ongoing,...
Incident Response
Does security awareness training actually help? When it comes to phishing and spear-phishing attacks, many executives appear to think it does make a difference.
Network Security
Java has been a very hot topic for security managers this year due to a steady stream of 0-day Java vulnerabilities that have been...
Network Security
eIQnetworks, a provider of security, risk and compliance solutions, has launched a new subscription-based offering designed to help smaller organizations quickly and cost effectively...
Incident Response
Solera Networks, a provider of security Intelligence and analytics solutions, this week launched a solution designed to help responders understand the impact of security...
Cybercrime
ROME - An Italian protest party said its website had come under a "hacker attack" that would force it to hold a new online...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)