Audits
A team of researchers has demonstrated that Intel’s SGX technology can be abused to hide an advanced and stealthy piece of malware that could...
Hi, what are you looking for?
SecurityWeek
Government
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.
Data Protection
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.
Risk Management
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
Compliance
The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.
Management & Strategy
Chinese Companies Are facing Many of the Same Cyber Challenges as Companies Elsewhere in the World
Application Security
California-based web security company PerimeterX announced on Monday that it raised $43 million in a Series C funding round, which brings the total raised...
Endpoint Security
The latest version of Google’s Chrome OS operating system brings some significant security improvements related to the Shill network manager, including a sandbox and...
Management & Strategy
Tenable on Monday announced the general availability of a new service designed to help organizations identify the vulnerabilities that have the highest likelihood of...
Application Security
The Swiss government last week announced the launch of a public bug bounty program for its electronic voting systems, with rewards of up to...
ICS/OT
Thousands of instances of a temperature control system are exposed to remote attacks from the internet due to users’ failure to change default passwords...
Audits
Huawei's top executive in Europe brushed off Western critics and defended the company's track record against accusations that it could serve as front for...
Risk Management
Demonstrating Effective Communication is a Foundation for Effective Security Operations
Management & Strategy
France will soon make proposals to reinforce the security of mobile telephone networks, Economy Minister Bruno Le Maire said Wednesday after the US stepped...
Audits
A US energy company, identified by some media reports as Duke Energy, received a $10 million fine from the North American Electric Reliability Corporation...
Application Security
Microsoft-owned GitHub informed developers on Thursday that they can easily ensure that the dependencies used by their applications are always secure and up to...
Cybercrime
Russia and China are capable of disrupting critical infrastructure in the United States, and Iran is not far behind, according to the Worldwide Threat...
Application Security
Salt Security emerged from stealth mode on Tuesday with a solution designed to identify and prevent API attacks, and $10 million in funding.
Risk Management
Over the last few years, the supply chain has emerged as a primary attack vector for both criminal gangs and nation-state groups. Attackers are...
Risk Management
The Mirriam-Webster dictionary defines the idiom “better the devil you know than the devil you don't” as “it is better to deal with a...
Audits
The U.S. Department of Homeland Security (DHS) on Tuesday issued an emergency directive instructing federal agencies to prevent and respond to DNS hijacking attacks.
Risk Management
Report Maps Out Ten Major Geopolitical Risks That Businesses Will Face in 2019
Data Protection
The developers of the popular open source video player VLC, which recently surpassed 3 billion downloads, have responded to criticism over the use of...
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)