Network Security
I was talking with a coworker a couple weeks back, and in the course of our conversation one of us mentioned the concept of...
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Network Security
SolarWinds, an Austin, Texas-based software maker known for its cost effective IT management solutions, today launched SolarWinds Firewall Security Manager (FSM), a multi-vendor firewall management...
Cloud Security
VMworld 2012 – NetApp has announced a new integration between their Data ONTAP 8 software and VMware’s vSphere 5.1 in order to offer customers...
Malware & Threats
Radware Discovers “Admin.HLP” - A New Keylogger Used in Targeted Attack Security researchers from Radware have discovered a new Trojan Key Logger named “Admin.HLP”...
Network Security
As you are likely aware, the number of generic top-level domains (gTLDs) is about to increase dramatically. In June, the Internet Corporation for Assigned...
Cloud Security
Newest vGW Virtual Gateway from Juniper Networks Adds Support for IPv6, Targets Cloud Services Providers with Greater Flexibility and Efficiency
Network Security
On Wednesday, Sophos announced the availability of AP 5, their USB accessory to RED (Remote Ethernet Device), which will turn the networking appliance into...
Network Security
A Vulnerability Management (VM) program is commonly defined as the “cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities" . According to Gartner’s report...
Management & Strategy
Defense contractor General Dynamics today said that it would acquire Fidelis Security Systems, a provider of network security tools that provide real-time network visibility,...
Cybercrime
India Blames Pakistan for Exodus of Migrant Workers
Incident Response
New Software Update to Windows Restricts Use of Certificates with RSA Keys Less Than 1024 bits in Length
Cybercrime
Anti Leaks, the group responsible for a recent DDoS attack against WikiLeaks, has turned their sights on RT.com, a state sponsored news agency in...
Network Security
AT&T's DNS Outage on Wednesday Resulted From DDoS Attack Targeted at Two LocationsAT&T on Thursday said that unknown attackers were responsible for intermittent disruptions that...
Network Security
Researchers have uncovered vulnerabilities in a popular denial of service attack kit that organizations could use to neutralize the attacks impacting their networks.
Network Security
Network Defenders Must Be Prepared to Deal with Low and Slow Attacks, Especially As Attackers Develop More Sophisticated Attack Tools...
Compliance
Part 1: Why the Star Trek Medical Tricorder Didn’t have an App Store
Management & Strategy
Many large organizations are not confident in their ability to fight off the latest salvos of advanced persistent threats, and are relying on reactive...
Malware & Threats
If Your Organization Has Information That is Valuable Enough to Keep Private, Then There is Value For An Attacker in Stealing It...
Application Security
Gauss: "Nation-state cyber-surveillance meets banking Trojan"Researchers at Kaspersky Lab have uncovered what they believe is another nation-state sponsored cyber-espionage toolkit designed to steal data...
Cloud Security
Responding to a CA Compromise - Is Your Organization Prepared?In last month’s Information Technology Laboratory (ITL) Bulletin, the National Institute on Standards and Technology...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)