Application Security
The Republican National Committee says none of its data was compromised in a cyberattack that involved B2B IT services provider Synnex.
Hi, what are you looking for?
SecurityWeek
Risk Management
Learn how attackers hide in plain sight—and what you can do to stop them without slowing down your business.
Risk Management
Patch Tuesday: Adobe documents hundreds of bugs across multiple products and warns of code execution, feature bypass risks.
Risk Management
Learn why your security controls matter more than theoretical risk scores and how exposure validation helps slash massive patch lists down to the few...
Risk Management
Despite massive investment, the explosion of sophisticated malware and deepfake attacks persists because organizations struggle to verify digital identities and establish fundamental trust.
Application Security
British anti-malware powerhouse Sophos has acquired Capsule8 to beef up the Linux protection capabilities to its endpoint detection and response product stack.Financial terms of...
Cloud Security
Microsoft late Tuesday pushed out an emergency patch to cover the Windows ‘PrintNightmare’ security flaw.
Cyberwarfare
Theft of U.S. IP is a fundamental part of China’s stated intention to be the world leader in science and technology by 2050
Cyber Insurance
A study of exposed web-app attack surface reveals that insurance companies are not good at keeping their own security house in order
Malware & Threats
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday announced the release of a new module for its Cyber Security Evaluation Tool (CSET),...
Application Security
Security researchers at Eclypsium have figured out a way to exploit a set of high-severity vulnerabilities that expose millions of Dell computers to stealthy...
Management & Strategy
The NSA on Thursday released guidance to help organizations secure their communication systems, specifically Unified Communications (UC) and Voice and Video over IP (VVoIP).UC...
Application Security
Google wants to bring “salsa” to drive enforcement at the software supply chain security party.
M&A Tracker
Previously I explored why the importance of evaluating cybersecurity prior to mergers and acquisitions and the layers of security management that involves. However, the...
Application Security
Identity management provider Elisity on Tuesday announced that it secured $26 million in Series A funding, bringing the total raised by the company to...
Cybercrime
Following the devastating attack on Colonial Pipeline, the largest refined products pipeline in the United States, the Cybersecurity and Infrastructure Security Agency (CISA) released...
Application Security
Christopher Ahlberg wants to “build a significant threat-intel company” and he isn’t shy about looking externally for technology innovation around data intelligence tools.
Data Protection
The White House dropped Trump-era executive orders intended to ban the popular apps TikTok and WeChat and will conduct its own review aimed at...
Application Security
Amazon this week activated its proprietary mesh network known as Sidewalk, linking tens of millions of Amazon smart devices, each sharing a tiny sliver...
Application Security
German software maker SAP this week released 17 new security notes documenting security vulnerabilities being fixed as part of the company's June 2021 SAP...
Application Security
United States trucks and military vehicles maker Navistar International Corporation has confirmed a cyberattack that resulted in some data being stolen.
Cyberwarfare
Energy Secretary Jennifer Granholm on Sunday called for more public-private cooperation on cyber defenses and said U.S. adversaries already are capable of using cyber...
Cybercrime
Application and network performance management company NETSCOUT warned organizations this week that STUN servers have been increasingly abused for distributed denial-of-service (DDoS) attacks, and...
Cybercrime
In an open letter, the White House this week urged corporate executives and business leaders to take the appropriate measures to protect their organizations...
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
RegisterLearn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.
RegisterExpert Insights
In a rapidly changing AI environment, CISOs are worried about investing in the wrong solution or simply not investing because they can’t decide what the best option is.
(Marc Solomon)
Adopting a layered defense strategy that includes human-centric tools and updating security components.
(Stu Sjouwerman)
A strong AI deployment starts with asking the right questions, mapping your risks, and thinking like an adversary — before it’s too late.
(Matt Honea)
It’s time for enterprises to stop treating unmanaged devices as an edge case and start securing them as part of a unified Zero Trust strategy.
(Etay Maor)
Many security professionals feel pressured to pursue leadership roles, but success can also mean going deeper, not just higher.
(Joshua Goldfarb)