Application Security
Technology giant IBM has announced plans to acquire early-stage attack surface management startup Randori in a deal that signals a major expansion of Big...
Hi, what are you looking for?
SecurityWeek
ICS/OT
The guidance details steps organizations can take to isolate vital OT and supporting systems, and operate in isolation for an extended period.
Risk Management
Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.
Risk Management
Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences.
Cybersecurity Funding
The company is enhancing third-party risk management (TPRM) through autonomous AI agents.
Cloud Security
Hundreds of companies are showcasing their products and services this week at the 2022 edition of the RSA Conference in San Francisco.
Cybersecurity Funding
Security awareness provider CybSafe on Monday announced that it has raised $28 million in Series B funding, which brings the total raised by the...
Application Security
Venture capital powerhouse Sequoia is leading a massive $50 million early-stage investment in Chainguard, a startup created by a team of ex-Google software engineers...
Management & Strategy
The Shadowserver Foundation warns of the security risk associated with more than 3.6 million internet-exposed MySQL servers that accept connections on port 3306/TCP.
Cybercrime
The FBI issued an alert on Thursday to inform the higher education sector about the exposure of credentials that can allow threat actors to...
Application Security
SYN Ventures, a Florida-based venture capital firm placing early-stage bets in cybersecurity startups, has closed a new $300 million fund and announced the addition...
Management & Strategy
Endpoint security company Tanium and risk management solutions provider Reciprocity have each announced free risk assessment offerings this week.
Application Security
Enterprise identity protection vendor Semperis has banked $200 million in a new round of funding. SecurityWeek has learned that the latest funding values the...
Application Security
LimaCharlie, a California company supplying tools to run an MSSP or SOC on a pay-as-you-use model, has attracted $5.45 million in seed round financing.
Malware & Threats
Microsoft has warned organizations of a new wave of brute force cyberattacks that target SQL servers and use a rather uncommon living-off-the-land binary (LOLBin).Specifically,...
Incident Response
The US Cybersecurity and Infrastructure Security Agency (CISA) has warned organizations about two actively exploited VMware product vulnerabilities, and the agency believes two other...
Cybercrime
The US government has warned companies that some of their IT workers may be from North Korea, and these individuals could be aiding their...
Risk Management
Identity & Access
Cybersecurity agencies in the United States, the United Kingdom, Canada, the Netherlands, and New Zealand warn that threat actors exploit poor security practices for...
Management & Strategy
The US Cybersecurity and Infrastructure Security Agency (CISA) has temporarily removed a Windows flaw from its Known Exploited Vulnerabilities Catalog after it was informed...
Application Security
BalkanID, a startup with ambitious plans to disrupt the Identity Governance and Administration (IGA) space, has banked $5.75 million in seed funding to help...
Application Security
Microsoft on Tuesday released critical software updates to fix at least 73 documented security flaws in the Windows ecosystem and warned that unknown attackers...
Cybercrime
Indicators of compromise (IoCs) and other resources have been released to help defenders deal with the actively exploited F5 BIG-IP vulnerability tracked as CVE-2022-1388.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)
Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most challenging balancing acts.
(Tod Beardsley)