Network Security
Researchers have disclosed a design flaw (CVE-2014-3566) in SSL 3.0 which lets attackers extract session cookies and other secrets from encrypted online communications.
Hi, what are you looking for?
SecurityWeek
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Network Security
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
Funding/M&A
Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Cyber Insurance
Cyberwarfare
Attackers exploited a zero-day vulnerability in Windows to spy on NATO, the European Union, Poland, Ukraine, private energy organizations, and European telecommunications companies, according...
Network Security
The past decade of Cybersecurity has been relentlessly focused on stopping threats at the network edge. The implicit assumption of this approach is that...
Network Security
New Next Generation Firewall Designed to Assess, Protect, and Certify Critical Infrastructure
Network Security
The Industrial Revolution changed the world forever, creating faster, better, and more efficient sectors of the economy. Drawing on parallels to this important period...
Network Security
The Faster a Network Can Respond and Act on Intelligence, the More Effectively it Will Block the Threat
Network Security
Finland-based SSH Communications Security announced today the launch of a new governance, risk and compliance (GRC) service designed to help organizations with Secure Shell...
Network Security
Threat protection firm FireEye has announced a new targeted attack protection offering for Apple’s Mac OS X and iOS platforms.
Network Security
The public-facing segments of federal civilian agency networks will be regularly and proactively scanned by the United States Department of Homeland Security (DHS) in...
Network Security
The war of words escalated this week between Palo Alto Networks and independent testing firm NSS Labs over the latest group test on next-generation...
Network Security
The open source virtual private network solution OpenVPN is reportedly affected by the notorious GNU Bash vulnerability dubbed ShellShock, a researcher revealed on Tuesday.
Malware & Threats
Enterprise network security firm Palo Alto Networks today announced the availability of a new security solution designed to prevent sophisticated cyber attacks targeting endpoints.
Network Security
Ever since the existence of the GNU Bash flaw (Shellshock) came to light last week, threat actors have been searching for vulnerable machines that...
Network Security
Content delivery network and Web security services provider CloudFlare today announced the introduction of SSL connections for all of the company's customers, including those...
Network Security
Cloud security startup FireLayers has launched a new solution designed to enable enterprises to securely use cloud-based applications.
Network Security
Akamai's Prolexic Security Engineering and Response Team (PLXsert) has published a new threat advisory to warn enterprises of distributed denial-of-service (DDoS) attacks leveraging a...
Network Security
High-Volume, High-Rate DDoS Attacks Increase in First Half of 2014Distributed denial-of-service (DDoS) mitigation solutions provider NSFOCUS has released a report documenting the attacks and...
Cloud Security
Content delivery network and web security provider CloudFlare has introduced a new feature that allows customers to take advantage of the company's solutions without...
Network Security
Threat protection firm FireEye has announced new offerings designed to provide customers with on-demand access to its cyber defense technology, intelligence, and analysts expertise...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)