Funding/M&A
Network security firm Check Point Software Technologies announced on Wednesday that it has acquired Hyperwise, a privately held, security startup focused on CPU-level threat...
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Network Security
Tokyo - More than 25 billion cyberattacks on the Japanese government and other bodies were logged in 2014, an agency said Tuesday, with 40...
Network Security
The developers of the advanced purely-functional programming language Haskell are investigating a data breach identified by the organization’s hosting provider.
Network Security
Platform to Facilitate Broader Sharing of Threat Intelligence Obtained Through FireEye’s Platform
Incident Response
Please join Virtustream and SecurityWeek on Wednesday, Feb. 18th at 1PM ET for a live webcast on enterprise security trends.
Network Security
When I talk to security leaders about their most challenging issues, one topic that always seems to come up is how to judge the...
Network Security
We’ve likely all heard the phrase “complexity is the enemy of security” many times. It’s an oft-used sound bite, but what can we learn...
Identity & Access
When it comes to securing our organizations from cyberattack, we can be our own worst enemy. For example, how many users on your network...
Network Security
In today’s high-risk IT environment, there’s no such thing as too much security, right? Well, that depends. As with anything in life, the devil...
Network Security
A team of researchers at Google have been trying to come up with a new design for Secure Sockets Layer (SSL) warnings that can...
Network Security
“Everything happens for a reason.” — Girlfriends 1, 2, 4, and 5.
Network Security
The United States Army Research Laboratory (ARL) has released the source code for Dshell, a framework that can be used to analyze cyberattacks.ARL, which...
Management & Strategy
Threat information-sharing is a phrase that gets thrown often, but there isn't much agreement on how organizations should be working together or the methods...
Cybersecurity Funding
LightCyber, an Israel-based security breach detection and response solutions provider, today announced an improved version of its LightCyber Magna platform.
Network Security
“Slow and Low” isn’t just a popular song by the Beastie Boys. It’s also the tempo that adversaries are now choosing to launch attacks...
Network Security
US Watchdog Urges Safeguards for 'Internet of Things'Washington - A US government consumer watchdog agency called Tuesday for better privacy and security to be...
Cybercrime
Management & Strategy
It’s okay to fail. This may sound radical, but I would argue that the information security community isn’t failing enough. Or rather, we as...
Network Security
Survey Examines Impact Data Breaches at Target and other Organizations Have had on IT Budgets and Security Practices. Organizations are increasing investment in IT...
Network Security
Security alerts can be highly useful in protecting an organization against a data breach, but inefficient alert management can have serious consequences, a new...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)