Mobile & Wireless
ICSA Labs this week launched a testing program designed to help determine whether smartphones and tables meet the latest security standards for connecting with...
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Application Security
Revelations about a recent breach of confidential data in Utah highlights how configuration errors can end up being costly.A recent data breach that exposed...
Network Security
For those purists within the auditing and network exploration community, there is good news this week – Nmap version 6.0 has been released to...
Incident Response
A survey of IT pros and executives from Brazil, Germany, U.K., Hong Kong and the United States, respondents paints a bleak picture of security.
Network Security
Although security and networking professionals aren’t officially fortune tellers, being able to predict issues -- and then alleviating them before they happen -- is...
Application Security
UK-based IT solutions firm, NCC Group, today anounced a new service that lets organizations simulate the world’s most common form of cyber attack –...
Incident Response
A NASA spokesperson has told SecurityWeek that they’re investigating claims made by a group of Iranian hackers earlier this week. The claim is that a SSL certificate...
Network Security
Using data collected from DShield, a community based log correlation system that collects data from sensors covering more than 500,000 IP addresses in over...
Network Security
For most of this week, The Pirate Bay (TPB) and Wikileaks have suffered under the pressure of a sustained DDoS attack from unknown sources....
Network Security
Neustar Reports Shows DDoS Attacks Can Cost Retailers More Than $100k Per-hourAccording to NeuStar, a provider of information, infrastructure and security solutions, the effects...
Network Security
Fixing DNSSEC Errors - What Can You Do When DNSSEC Goes Bad?Despite the fact that the Internet is an increasingly critical component of the...
Network Security
Portable Appliance Enables Massive-Scale Performance and Security Testing Anywhere, Anytime
Network Security
In a letter to Senator John McCain, originally obtained by the Washington Post for a report published last Friday, General Keith Alexander, the director...
Incident Response
Context is Invaluable, and Lets you Understand What your Security Event and Alert Information Mean.
Network Security
McAfee Targets Data Centers with Scalable 80 Gbps Next Generation Network IPS
Network Security
WatchGuard Technologies, a Seattle, Washington-based provider of IT security solutions for business, today said its entire portfolio of content and network security products are...
Network Security
CORE Impact Pro Release 12.3 Provides Enhanced Endpoint, Mobile, Web and Wireless Testing Capabilities
Network Security
Senior officials within Iran’s Oil Ministry have said that they now know what the attacker’s hidden agenda was when they launched a cyber attack...
Network Security
Attack Traffic Originating from The United States Jumped Nearly 37% in Q4 2011, Says Akamai Report.Internet infrastructure giant Akamai Technologies, released its Fourth Quarter,...
Network Security
Stealthy Attacks Use Trusted Enterprise Systems and Trusted Networks, Making Detection DifficultSkilled attackers are burrowing their command and control (C&C) servers inside the networks...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)