Network Security
Cyber threat intelligence firm iSIGHT Partners has released a new Software Development Kit (SDK) and Browser Plugin in an effort to expand its threat...
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Data Protection
Hacking and data breaches have become a painful reality for businesses of all sizes and from all industries. Attackers have perfected the art of...
Network Security
Unauthorized certificates for several Google domains were issued earlier this month by an Egypt-based company that obtained an intermediate certificate from the China Internet...
Management & Strategy
Having spent a considerable portion of time in the security industry, I’ve learned a thing or two along the way including that some of...
Cybercrime
When it comes to cybersecurity, perhaps nothing has been as highly touted as the answer to every executive’s prayers as big data.Years after “big...
Network Security
Normally you wouldn’t think something as mundane as farming equipment could incite a lot of cyber malice, right? But that’s exactly what happened. I’ve...
Cybercrime
Hackers build attacks on a huge treasure-trove of existing vulnerabilities, and they find new ways to exploit new technologies like mobile and the Internet...
M&A Tracker
As cliché as the saying is, it is quite true that we live in a global world. It’s not uncommon for a large enterprise...
Network Security
Dell today announced the availability of a new endpoint security suite designed to help organizations of all sizes protect sensitive information and meet compliance...
Network Security
Radware, a provider of application delivery DDoS attack protection solutions, this week unveiled its latest attack mitigation platform designed to help carriers and cloud...
Network Security
Mozilla wants to improve the process of revoking intermediate certificates and it plans on doing so with a new feature that will be introduced...
Network Security
I’m probably stating the obvious, but a brief look at security reports that summarize 2014 demonstrates that attackers, again, have the upper hand. The...
Network Security
Researchers have released details of a vulnerability (CVE-2015-0204) that makes it possible for hackers to crack HTTPS-protected traffic by forcing vulnerable clients to downgrade...
Management & Strategy
Network security firm Palo Alto Networks (NYSE: PANW) announced on Monday that total revenue for the fiscal second quarter ended January 31, 2015 grew...
Funding/M&A
Lookingglass Cyber Solutions, an Arlington, VA-based provider of threat intelligence solutions, announced on Monday that it has acquired Deep Packet Processing (DPP) platform provider...
Network Security
Network Security
Advanced Evasion Techniques (AETs) - Dynamic and Constantly Evolving Network Threats
Incident Response
Attackers are doing a better job at hiding in the most complex parts of computer operating systems, according to a new report from FireEye-owned...
Network Security
Security firm Avast announced on Monday the availability of a free offering designed to help small and medium businesses (SMBs) protect their networks against...
Network Security
My youngest daughter has single-handedly held up one end of the Forth Bridge in Edinburgh, Scotland. My son? He’s been photographed kicking over the...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)