Mobile & Wireless
CloudCracker, a new service from security researcher Moxie Marlinspike, which expands on the platform developed for WPACracker, offers penetration testers and network auditors a...
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Network Security
AlgoSec has added new features to its flagship security management suite to help organizations leveraging next-generation firewalls.
Malware & Threats
There are Tons of Applications and Code out there that are not Overtly Malicious, yet do Spyware-like Things Without the user’s Knowledge and Reduce...
Management & Strategy
In recent SEC filings, VeriSign revealed they were repeatedly hacked during 2010. Though the company did not divulge what type of data was breached,...
Application Security
Protests against Apple and Foxconn due to furor over reports about working conditions have gone digital.
Network Security
The Department of Motor Vehicles (DMV) may not be many people’s favorite place, but in South Carolina, it has apparently become a magnet for...
Management & Strategy
We cannot be perfect. We can only be smart. We try to follow the rules and be as thorough as we can, and we...
Cybercrime
Hacker Sentenced to 30 Months in Prison for Hacking into Marriott Systems to Extort Employment from the CompanyA hacker who tried to land an...
Management & Strategy
Palo Alto Networks Appoints Steffan Tomlinson as Chief Financial Officer Palo Alto Networks, the Santa Clara, California based network security company best known for...
Malware & Threats
While we must continue to invest in new technologies that provide detection of the latest threats, detection alone isn’t enough.Traditional security solutions are falling...
Network Security
Akamai Technologies has released its State of the Internet report for the third quarter of 2011, based on data collected from its massive global...
Network Security
Solera Networks, a provider of network forensics and network monitoring solutions, announced today that it has secured $20 million in Series D financing lead...
Data Protection
Should Security Concerns Make You Think Twice About Where FTP is Used Within Your Organization?
Cybercrime
Security expert thinks radio frequency could be used to detect cyber attacks on critical infrastructure with complex systems.
Network Security
As Anonymous initiated what it said will be the “largest attack ever on government and music industry sites” in response to actions taken by...
Application Security
Software-as-a-Service (SaaS) security and compliance solutions provider Qualys, this week launched an updated version of its FreeScan service aimed at helping small and medium...
Network Security
Palo Alto Networks today released its semi-annual Application Usage and Risk Report, a report that digs into employee activity and the types of applications...
Network Security
Security firm Alienvault says that a new variant of the Sykipot family of malware is targeting ActivIdentity’s ActivClient, which is used by the U.S....
ICS/OT
It’s almost inevitable that a discussion about industrial control system cyber security will touch on a few touchy topics: the ‘air gap’ myth; the...
Network Security
Sophos has released a new edition to its line of network protection offerings, announcing today that its gateway appliances have been adopted for virtual...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)