Cyber Insurance
SecurityScorecard, a provider of security ratings, said it has completed a $50 million Series D financing round led by Riverwood Capital, bringing the company’s...
Hi, what are you looking for?
SecurityWeek
Government
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.
Data Protection
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.
Risk Management
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
Compliance
The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.
Cloud Security
Internet performance and security firm Cloudflare on Tuesday announced the availability of a free API designed to help certificate authorities (CAs) securly issue certificates...
Cybersecurity Funding
Florida’s county elections departments will retain $2.3 million in unspent grant money aimed at stopping cyber-attacks on the state’s voting system, Gov. Ron DeSantis...
Endpoint Security
The Cybersecurity and Infrastructure Security Agency (CISA) of the U.S. Department of Homeland Security (DHS) on Monday issued an alert for the Windows vulnerability...
Audits
Some U.S. government agencies still rely on knowledge-based identity verification despite the fact that this system has been easy to beat following the massive...
Risk Management
Security organizations are grappling with anywhere from five to 50+ different security vendors and solutions. These disparate products each generate their own set of...
Risk Management
Rapid7 has analyzed the visible cyber exposure of some of the UK's largest companies -- the FTSE 250.
ICS/OT
Organizations have been investing more in the cybersecurity of industrial control systems (ICS) and operational technology (OT), and the results are showing, but many...
Management & Strategy
Huawei's cyber security chief told the UK parliament Monday that the Chinese telecoms giant has been advised it was under no obligation to spy...
Malware & Threats
The U.S. National Security Agency (NSA) on Tuesday urged Windows users and administrators to immediately address the vulnerability tracked as BlueKeep and CVE-2019-0708.
Endpoint Security
Hackers can use synthetic clicks to bypass many of the privacy and security features implemented last year by Apple in its macOS operating system,...
Malware & Threats
Microsoft has reminded users to patch the Windows vulnerability tracked as BlueKeep and CVE-2019-0708 due to the high risk of exploitation.
Nation-State
Attackers With the Backing and Sophistication of Nation-States Are Increasingly Targeting Commercial Entities
Cybersecurity Funding
AttackIQ, a California-based company that specializes in continuous security validation, on Wednesday announced that it raised $17.6 million in a Series B funding round,...
Malware & Threats
Chinese telecom giant Huawei stepped up its legal battle on Wednesday to overturn US legislation barring American federal agencies from buying its products amid...
Malware & Threats
Nearly one million devices are vulnerable to attacks involving the Windows vulnerability dubbed BlueKeep and it appears that hackers have already started scanning the...
Application Security
Microsoft-owned GitHub on Thursday announced the introduction of several new security tools and features designed to help developers secure their code.
Compliance
The New York State Department of Financial Services (DFS) this week announced that it has launched a new cybersecurity division whose role is to...
Cybercrime
Facebook on Thursday said it recently disabled billions of bogus accounts set up by "bad actors" and that five percent of active accounts are...
Cybercrime
The hacking of U.S. election systems, including by foreign adversaries, is inevitable, and the real challenge is ensuring the country is resilient enough to...
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)