Audits
Italy's data privacy watchdog said Friday it was investigating the "potential risks" that Russian antivirus software Kaspersky could be used to launch cyberattacks.
Hi, what are you looking for?
SecurityWeek
Data Protection
A New Mexico jury has found Facebook liable for deceiving users about privacy protections on the platform.
Privacy
The ruling was made in the case of a bank robber whose identity was discovered through a geofence warrant.
Data Protection
An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users.
Privacy
The vulnerability is tracked as CVE-2026-6770 and it has been patched with the release of Firefox 150 and Tor 15.0.10.
Application Security
The Internet Systems Consortium (ISC) has released security updates to fix multiple high-severity vulnerabilities in the widely deployed Berkeley Internet Name Domain (BIND) server...
Application Security
Software supply chain security fears escalated again this week with the discovery of what’s being described as "deliberate sabotage" of code in the open-source...
Compliance
Italy's data privacy watchdog on Wednesday fined US-based firm Clearview AI 20 million euros (almost $22 million) over its controversial facial recognition software.
Application Security
German software maker SAP this week announced the release of 12 new and four updated security notes as part of its March 2022 Patch...
Application Security
BastionZero, a provider of remote access to backend infrastructure, has raised $6 million in seed investment. The funding round was led by Dell Technologies...
Application Security
Microsoft this week announced the general availability of Defender for Business, an endpoint security solution aimed small- and medium-sized businesses (SMBs).
Cybercrime
Warnings to use disposable “burner” phones and laptops. Privacy-protecting software. Concerns about a security flaw in an official Games smartphone app.
Data Protection
Google this week announced Privacy Sandbox on Android, a new initiative expected to lead to more private advertising solutions for its mobile users.The new...
Privacy
Cambodia is delaying an internet gateway that had raised concerns around privacy and free speech, halting its planned mid-week implementation due to Covid-19 related...
Compliance
Facebook-parent Meta has agreed to pay $90 million to settle a 10-year-old lawsuit accusing it of tracking users online even after they logged off...
Application Security
Technology giant Google is offering bigger cash awards for hackers reporting critical security flaws affecting the Linux Kernel, GKE, Kubernetes, and kCTF.
Compliance
Google once used the slogan "don't be evil" to distinguish itself from its competitors, but now a growing number of pro-privacy startups are rallying...
Application Security
A team of Israeli entrepreneurs with roots in the application security ecosystem is taking a stab at software supply chain security with big backing...
Privacy
Cambodia is powering up its new National Internet Gateway, a move activists say will allow the government to further silence the country's embattled opposition...
Compliance
The CIA has a secret, undisclosed data repository that includes information collected about Americans, two Democrats on the Senate Intelligence Committee said. While neither...
Cybersecurity Funding
Los Gatos, Calif-based data protection and privacy firm Titaniam has raised $6 million seed funding from Refinery Ventures, with participation from Fusion Fund, Shasta...
Identity & Access
The IRS said Monday it will suspend the use of facial recognition technology to authenticate people who create online accounts after the practice was...
Application Security
Malware hunters at Microsoft are calling attention to a nasty macOS malware family that has evolved quickly from a basic information-gathering trojan to a...
Privacy
A bill that would grant Massachusetts residents what supporters describe as fundamental internet privacy rights — including greater control over their personal information —...
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)