Endpoint Security
Companies affected by the recently disclosed GRUB2 bootloader vulnerability dubbed BootHole have started releasing advisories to inform customers about the impact of the issue...
Hi, what are you looking for?
SecurityWeek
Data Protection
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.
Risk Management
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
Compliance
The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.
CISO Strategy
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
Incident Response
Other Industries Should Look to Intelligence Teams in the Financial Sector for Guidance and Lessons Learned
Compliance
India has banned 47 more Chinese apps just weeks after blocking the highly popular video-sharing platform TikTok and 58 others over national security and...
Management & Strategy
A majority of election administrators in the United States have yet to implement cybersecurity controls designed to provide protection against phishing attacks, a new...
Data Protection
Source code belonging to tens of companies, including several major organizations, has been leaked online after it was found on unprotected DevOps infrastructure.
Cybercrime
In a joint alert this week, the United States and the United Kingdom warned that a piece of malware has infected over 62,000 QNAP...
Malware & Threats
The Federal Bureau of Investigation has issued an alert to inform organizations in the United States of the risk associated with the use of...
Cybercrime
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert on Friday to warn organizations about the risk posed by a recently patched...
Cyberwarfare
The U.S. National Security Agency and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency have issued a joint alert urging critical infrastructure...
Cyberwarfare
Chinese drone giant Da Jiang Innovations (DJI) on Thursday responded to the disclosure of security issues discovered by researchers in one of its Android...
Cybersecurity Funding
CyCognito, a company that focuses on identifying and eliminating shadow risks in business environments, has closed a $30 million Series B funding round. To...
Management & Strategy
The global pandemic has highlighted the importance of being prepared for the unexpected. Opportunistic attackers are taking advantage of rapidly changing work environments and...
Compliance
In an open letter this week, six data protection and privacy regulators from around the world have asked video teleconferencing (VTC) organizations to focus...
Malware & Threats
Onapsis on Wednesday announced the release of an open source tool that helps organizations determine if their SAP systems are vulnerable to RECON attacks...
Management & Strategy
How Can Enterprise Security Buyers Make More Educated Decisions Around the Start-ups They Invest Time and Money Into?
Compliance
Polymer Launches With Solution That Automatically Redacts Sensitive Data Shared in Collaboration ToolsCollaboration security startup Polymer announced its official launch on Wednesday with a...
Cloud Security
Microsoft on Tuesday unveiled several new security capabilities for its Microsoft 365 and Azure solutions, including for data security, compliance, and risk management.
Data Protection
Microsoft last week revealed plans to move forward with the retirement of the Transport Layer Security (TLS) 1.0 and 1.1 protocols in Office 365,...
Risk Management
As SecOps Teams Increasingly Take on Proactive Risk Reduction, Posture Fatigue Will Grow
Cyberwarfare
Senior US Democrats have demanded an urgent intelligence briefing for lawmakers from the FBI over what they said was a concerted foreign campaign to...
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)