Identity & Access
High-risk users are aware that they are more likely to be targeted by hackers compared to the general population, but many of them still...
Hi, what are you looking for?
SecurityWeek
Data Protection
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.
Risk Management
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
Compliance
The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.
CISO Strategy
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
Identity & Access
Google announced on Wednesday that it has simplified the enrollment process for its Advanced Protection Program and it now allows users to activate a...
Risk Management
Windows 7 has reached end of life on Tuesday, January 14, 2020, but hundreds of millions of PCs worldwide still run the operating system,...
Risk Management
Intelligence Can be Aligned With Larger Objectives to Improve Decision-Making Beyond the Cybersecurity Domain
Management & Strategy
A bill introduced this week by Senator Tom Cotton (R-Arkansas) would ban the sharing of intelligence with countries that use Huawei technologies in their...
ICS/OT
MITRE on Tuesday announced the initial release of a version of its ATT&CK knowledge base that covers the tactics and techniques used by malicious...
Cybercrime
The U.S. Department of Homeland Security has issued warnings about the possibility of cyberattacks launched by Iran in response to the United States killing...
Risk Management
Purchase, NY-based Mastercard announced that it has agreed to acquire Salt Lake City, UT-based RiskRecon, an online security monitoring company that focuses on third-party...
Management & Strategy
Newly introduced bipartisan legislation aims to implement improved cybersecurity protections for K-12 educational institutions in the United States.
Application Security
Google this week announced plans to turn off access to G Suite account data for less secure apps (LSAs), as they represent a potential...
Management & Strategy
Messaging platform WhatsApp this week announced plans to take legal action against individuals and companies that abuse the platform for bulk messaging.
Management & Strategy
The U.S. Defense Department announced this week that companies hoping to obtain defense contracts will have to demonstrate that they can keep sensitive information...
Endpoint Security
Microsoft Security Essentials (MSE) will stop protecting Windows 7 PCs on January 14, 2020, when support for Windows 7 is set to end.
Cybersecurity Funding
CyberGRX, a third-party cyber risk management firm based in Denver, Colorado, this week announced that it raised $40 million in a Series D funding...
Cyber Insurance
Cyber Has Emerged as a Risk That is Not Specifically Covered by Other Insurance Policies
Cybersecurity Funding
Automated third-party security lifecycle management provider Panorays this week announced it raised $15 million as part of a Series A funding round.
Data Protection
Chinese tech giant Huawei is asking a U.S. federal court to throw out a rule that bars rural phone carriers from using government money...
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)