Application Security
Users of the popular LastPass password manager are being targeted in so-called “credential stuffing” attacks that use email addresses and passwords obtained from third-party...
Hi, what are you looking for?
SecurityWeek
Data Protection
A New Mexico jury has found Facebook liable for deceiving users about privacy protections on the platform.
Privacy
The ruling was made in the case of a bank robber whose identity was discovered through a geofence warrant.
Data Protection
An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users.
Privacy
The vulnerability is tracked as CVE-2026-6770 and it has been patched with the release of Firefox 150 and Tor 15.0.10.
Application Security
Gabriel Weinberg’s DuckDuckGo is taking aim at the desktop browser market, betting that default privacy-centric settings will provide safer alternatives to Google’s Chrome and...
Application Security
French video game company Ubisoft this week confirmed that 'Just Dance' user data was compromised in a recent cybersecurity incident.The data breach was the...
Application Security
The University of Toronto’s Citizen Lab has discovered another player in the private sector mobile spyware business, fingering a tiny North Macedonia company called...
Application Security
Security researchers at Google’s Project Zero have picked apart one of the most notorious in-the-wild iPhone exploits and found a never-before-seen hacking roadmap that...
Application Security
Venture capital investors are continuing to bet big on cloud security technologies with two early-stage startups announcing a combined $130 million in funding for...
Cloud Security
The United States and Australia signed an agreement Wednesday to ease access by their justice departments to digital phone and email records needed in...
Application Security
Famed hacker Dan Kaminsky has been inducted in the Internet Society’s Hall of Fame for his groundbreaking contributions to DNS (domain name system) security.
Application Security
IronScales, a company that leverages artificial intelligence in technology for email security, has closed a $64 million Series C funding round.The investment round was...
Application Security
Grip Security, an Israeli startup that helps organizations securely adopt software-as-a-service (SaaS), on Tuesday announced the closing of a $19 million Series A funding...
Application Security
Web traffic protection provider Kasada on Monday announced it has raised $23 million in Series C funding. To date, the company has raised $39...
Application Security
The U.S. government’s cybersecurity agency has updated its catalog of “known exploited vulnerabilities” and set deadlines for federal agencies to apply fixes for security...
Application Security
Privacy-focused technology startup Soveren on Tuesday announced it has closed a $6.5 million seed round led by firstminute capital. Northzone also invested in the...
Application Security
Cryptocurrency trading powerhouse Coinbase on Tuesday announced plans to acquire Unbound Security, an Israeli startup that provides protection for cryptographic keys and credentials.Financial terms...
Application Security
Video conferencing software giant Zoom has shipped patches for a pair of security defects that expose Windows, macOS, Linux, iOS and Android users to...
Application Security
The troubles for Israeli surveillance software maker NSO Group continue to pile up with news that Apple has filed suit to ban the company...
Compliance
WhatsApp is adding more details to its privacy policy and flagging that information for European users, after Irish regulators slapped the chat service with...
Application Security
A new Android banking trojan has been found, targeting international banks from the United Kingdom and Italy (including in the U.S.). and five different...
Data Protection
The Right to be Forgotten (technically the right to erasure or for users to have personal data removed from service providers’ records) creates a...
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)