Network Security
Last week at the RSA Conference, nCircle surveyed 205 people about their thoughts on various security measures and their effectiveness against state-sponsored attacks. The...
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Cybercrime
After less than a six-week hiatus, attackers have resumed their distributed-denial of service attacks against U.S. financial institutions.
Management & Strategy
Advanced Threat Protection & Visibility Series – Part 1: Advanced Threats and Nation States
Network Security
SAN FRANCISCO – RSA CONFERENCE 2013 - Mandiant and Palo Alto Networks have teamed up to provide customers with a “holistic approach to thwart advanced...
Network Security
Last week Mandiant released a powerful report that exposed what certainly appears to be a state-sponsored hacking initiative from China, dubbed by Mandiant as...
Network Security
New Appliance from Sourcefire Provides Continuous Analysis and Retrospective Security to Address Malware Across the Enterprise
Network Security
Next-generation firewalls go beyond filtering traffic from port 80 or 443 and deliver more control by providing the ability to filter by application type...
Network Security
European Aeronautic Defence and Space Company and ThyssenKrupp Breached, Germany Calls for Mandatory Breach Disclosure
Endpoint Security
Over the years, I have heard variations of the thought that is roughly: “I don’t have to secure these systems because they will be...
Malware & Threats
Chances are you’ve never heard of Dr. John Snow. But the methods he used more than 150 years ago to solve the mystery of...
Endpoint Security
Trusteer's new exploit prevention platform protects enterprises from zero-day and social engineering attacks from successfully compromising endpoints.
Network Security
Discussions on making the Internet as secure as possible began alongside the growth of the Internet. And we’re still having those discussions because, as...
Network Security
FireMon, a provider of security management and risk analysis solutions, this week announced the latest version of its security policy and posture management solution,...
Network Security
Deep Inside Your Network: The Reality of Advanced Threats and the Technology Needed to Fight ThemSo far this year, the Washington Post, Wall Street...
Network Security
Mozilla announced an update to their CA Certificate policy on Friday, including changes on compliance and auditing. The update, the organization explained in a...
Network Security
Some the biggest names in the certificate authority world banded together and launched a new organization dedicated to strengthening the CA infrastructure.
Application Security
Symantec made a trio of announcements expanding its Website Security Solutions portfolio on Wednesday, designed to help increase the security and performance needs for...
Network Security
Earlier this month, SecurityWeek reported on the AP report citing two U.S. officials that claimed a National Intelligence Estimate (NIE) report would detail the...
Application Security
A little over a third of security professionals believe their organizations are investing in the wrong security technologies, according to a recent survey from...
Compliance
San Jose, California-based Zscaler, a provider of cloud-based security solutions, today added new analytics technology to its cloud security suite designed to provide enterprise...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)