Network Security
LOUISVILLE - DerbyCon – During his talk on Friday, Rapid7’s HD Moore presented findings to attendees of DerbyCon, which are the result of his...
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Network Security
An Estimated 1,700 people arrived in Louisville, Kentucky on Friday for DerbyCon, a weekend filled with training, technical discussions, and fine Kentucky bourbon. This...
Network Security
Change is the norm for most security teams, as evolving business requirements as well as new threats dictate new or modified policies and tools....
Network Security
Security firm Prolexic Technologies released a whitepaper today aimed at helping organizations use their firewalls more effectively to fight distributed denial-of-service (DDoS) attacks.
Compliance
eIQnetworks, a Massachusetts-based provider of security and compliance solutions, has launched a new SIEM solution that the company says can be installed and fully...
Network Security
Network security provider Arbor Networks has teamed with Alcatel-Lucent to establish a new proof-of-concept laboratory in Singapore for communications service providers to conduct testing...
Network Security
When Defending Against Today's Threats, It's Important To Know If a Particular Security Solution Is Ready For The Front Llines of The Network.
Application Security
Employees are increasingly turning to web-based or web-enabled applications to help get their jobs done. To combat the risks associated with these applications, one...
Malware & Threats
IBM's X-Force 2012 mid-year report found a sharp increase in browser-related exploits, Mac-based attacks, and SMS related scams. Since its last Trend and Risk...
Cybercrime
According to security vendor Incapsula, August was a busy month for Web Application attacks. The company's latest "attack heat map report" shows some interesting...
Cybercrime
NEW YORK - A US financial industry group warned banks and other institutions to beware cyber attacks Wednesday, after some firms reported sporadic problems...
Identity & Access
On Monday, Google announced that IMAP/SMTP and XMPP would be getting a security boost in the form of OAuth 2.0. The transition comes as...
Cybersecurity Funding
Damballa, an Atlanta, Georgia-based company that helps detect cyber threats, said today that it has closed $15 million in new funding to help propel...
Network Security
By Taking The Approach of Assuming You Have Been Hacked, It Can Go a Long Way In Being Proactive About Possible Attacks...Information security practitioners...
Network Security
An Opportunity for Datacenters with a Real Security Service Centric Approach
Cloud Security
Networking giant Cisco Systems today introduced a set of security solutions designed to protect data centers that are shifting to virtualized environments.
Cloud Security
Part One of Three In a Series On Protecting Virtualized Data Centers
Network Security
Huawei, the Chinese telecom giant subject to an investigation on Capitol Hill looking into their alleged ties to the PLA, has published a report...
Network Security
Congress is interested in speaking to China’s top telecommunications firms as part of an ongoing investigation in to their organizational structures, history, and potential...
Management & Strategy
In Network Security We are Always in a Battle of Wits Against the Attackers...This week marks the official start of a new school year...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)