Incident Response
The failure of President Donald Trump and the Democratic Party to reach an agreement over funding for the controversial Mexico border wall has led...
Hi, what are you looking for?
SecurityWeek
Government
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.
Data Protection
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.
Risk Management
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
Compliance
The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.
Data Protection
A newly discovered set of compromised login details contains roughly 773 million email addresses, Australian web security expert Troy Hunt reveals.
Risk Management
The annual World Economic Forum (WEF) Global Risks Perception Survey this year again includes two cybersecurity risks in the top five perceived long-term (10-year)...
ICS/OT
Hackers can abuse legitimate features present in industrial controllers to hijack these devices and leverage them to gain a foothold in a network, a...
Compliance
The founder of Huawei said Tuesday his company would refuse to disclose secrets about its customers and their communication networks, trying to lay to...
Risk Management
A recently published report from the United States Department of Defense (DoD) Inspector General shows that, while the Department has improved its security posture,...
Risk Management
A business risk intelligence (BRI) program requires many components about which I’ve written previously: the right intelligence requirements, collection strategy, KPIs, vendors,
Cyber Insurance
In October 2018, Mondelez International filed suit against Zurich American Insurance Company. At stake is a $100 million insurance claim for damage caused by...
Compliance
Many TLS certificates for .gov domains have not been renewed due to the ongoing shutdown of the United States government, making them insecure or...
Risk Management
Last year was bookended by two major corporate data breaches – Under Armour in February and Marriott in December – with incidents too numerous...
Audits
A team of researchers, including experts involved in the discovery of the Meltdown and Spectre vulnerabilities, have disclosed a new type of side-channel attack...
Application Security
The European Union is offering a total of more than €850,000 – nearly $1 million – for vulnerabilities found in 14 widely used free...
Risk Management
Focus on the Countless Manageable Vulnerabilities That You Can Control and Protect Against
Audits
The U.S. Department of Defense lacks visibility into software inventories, a review of Marine Corps, Navy, and Air Force commands and divisions reveals.
Endpoint Security
Hackers could remotely brick servers by launching firmware attacks that involve the Baseboard Management Controller (BMC), researchers at firmware security company Eclypsium have demonstrated.
Compliance
Huawei defended its global ambitions and network security on Tuesday in the face of Western fears that the Chinese telecom giant could serve as...
Compliance
A Czech cyber-security agency on Monday warned against using the software and hardware of China's Huawei and ZTE companies, saying they posed a threat...
Risk Management
The Cyber Readiness Institute (CRI) has launched a Cyber Readiness Program designed to provide practical and meaningful assistance to small and medium businesses who...
Management & Strategy
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)