ICS/OT
Researchers at Israel-based boutique cybersecurity consultancy JSOF this week disclosed the details of seven potentially serious DNS-related vulnerabilities that could expose millions of devices...
Hi, what are you looking for?
SecurityWeek
Network Security
This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies.
Cybercrime
Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains.
Artificial Intelligence
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right.
ICS/OT
Forescout’s new network segmentation research shows that OT and medical devices often share network segments with other enterprise assets.
Cybersecurity Funding
Swimlane, a provider of security orchestration, automation and response (SOAR) solutions, announced today that it has raised $40 million in growth funding.
Identity & Access
A researcher claimed last week that he managed to take control of the country code top-level domain (ccTLD) for the Democratic Republic of Congo...
Application Security
Canadian data security startup Qohash this week announced it raised CAD 8 million (approximately USD $6.3 million) in Series A funding. The financing was...
Network Security
Cisco this week announced that it does not plan on addressing tens of vulnerabilities affecting some of its small business routers.
Application Security
German software maker SAP has published 10 advisories to document flaws and fixes for a range of serious security vulnerabilities.
Application Security
Microsoft on Tuesday released the first batch of security patches for 2021 with fixes for 83 documented security vulnerabilities, including a "critical" bug in...
Data Protection
Microsoft on Monday announced that Microsoft Defender for Endpoint on Linux now provides endpoint detection and response (EDR) capabilities to all users.
Disaster Recovery
NVIDIA this week announced the release of software updates for its GPU display drivers and vGPU software, with fixes for a total of 16...
Cybercrime
A global cyber espionage campaign has resulted in the networks of many organizations around the world becoming compromised after the attackers managed to breach...
Cloud Security
Red Hat on Thursday snapped up container and Kubernetes security startup StackRox, a deal that speeds up its ambitions in the enterprise cloud market.Financial...
Cybercrime
Citrix on Monday informed customers that it released firmware updates for its Application Delivery Controller (ADC) and Gateway products to prevent threat actors from...
Cybercrime
Security researchers have observed the first attempts to compromise Zyxel devices using a recently disclosed vulnerability related to the existence of hardcoded credentials.
Network Security
Secure Access Service Edge (SASE) Can be a Game-Changer When Compared to Security of the Past
Network Security
Several Zyxel firewall and WLAN controller products contain hardcoded credentials for an undocumented user account that has admin privileges.Identified by EYE security researcher Niels...
Data Protection
Security researchers at IBM Corp. and Dragos Inc. are warning that the industrial control systems that power manufacturing plants and utilities are prime targets...
Cybercrime
Before this week, few people were aware of SolarWinds, a Texas-based software company providing vital computer network monitoring services to major corporations and government...
Network Security
As Organizations Become More Hybrid and Distributed, Their Security Needs to Be Able to Span Across All Environments
Management & Strategy
Microsoft this week shared details on the steps it will take in an effort to ensure improved security for Internet routing.
Application Security
The Apache Software Foundation has released a security update for Struts 2, to address what is described as a “possible remote code execution” flaw...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)