Network Security
Edge devices that are no longer supported have been targeted in attacks by state-sponsored hackers, the US says.
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Network Security
Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination...
Network Security
Malicious attacks are increasing in frequency, sophistication and damage. Defenders need to find and harden system weaknesses before attackers can attack them.
Network Security
AI will assist companies in finding their external attack surface, but it will also assist bad actors in locating and attacking the weak points.
Nation-State
A Chinese threat actor is exploiting known vulnerabilities in discontinued Asus devices in an Operational Relay Box (ORB) facilitation campaign.
Network Security
Security firms say the flaw has been actively exploited for weeks, even as Fortinet quietly shipped fixes and CISA added the bug to its...
Network Security
One of the flaws can be exploited by remote unauthenticated attackers for arbitrary command execution.
Network Security
In early September, hackers stole the firewall configuration backup files stored using the MySonicWall service.
Network Security
Join the virtual event we dive into the world of digital identity management and the role of zero-trust principles and associated technologies.
Network Security
The Year 2036/2038 problem is a bug that will be triggered in more than a decade, but hackers could exploit it today against ICS...
Network Security
The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user.
Network Security
The attack was aimed at a European network infrastructure company and it has been linked to the Aisuru botnet.
Network Security
The company sent a new preferences file to less than 5% of customers, urging them to import it into firewalls and reset their passwords.
Network Security
Fifteen years after its debut, Zero Trust remains the gold standard in cybersecurity theory — but its uneven implementation leaves organizations both stronger and...
Network Security
Flaw allows attackers to reset and hijack TP-Link TL-WA855RE devices; CISA urges users to retire discontinued extenders.
Network Security
Part of a wave of DDoS attacks that lasted for weeks, the assault was a UDP flood, originating from several IoT and cloud providers.
Funding/M&A
CrowdStrike says the acquisition will bring valuable technology to enhance its Falcon Next-Gen SIEM.
Network Security
Zero-day exploited in the wild forces Citrix and CISA to push emergency patch deadlines for federal agencies.
Cybercrime
As attackers target help desks and identity systems, traditional security perimeters are proving insufficient against agile, socially-engineered threats.
Network Security
SonicWall has been investigating reports about a zero-day potentially being exploited in ransomware attacks, but found no evidence of a new vulnerability.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)