Application Security
Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...
Hi, what are you looking for?
SecurityWeek
Risk Management
As organizations have fortified their defenses against direct network attacks, hackers have shifted their focus to exploiting vulnerabilities in the supply chain to gain...
Risk Management
Complaint alleges that defendants submitted a false and fraudulent cybersecurity assessment score.
Risk Management
What does “secure by default” mean for the average company as you implement security systems and protocols?
Cybersecurity Funding
Vanta has raised $150 million in a Series C funding round and it plans on using the money to fuel expansion and AI innovation.
Risk Management
A cyber resilience strategy is vital for business continuity and can provide a range of benefits before, during, and after a cyberattack.
Network Security
Foreign attackers have many more toolsets at their disposal, so we need to make sure we’re selective about our modeling, preparation and how we...
Funding/M&A
More than 4,000 internet-accessible Pulse Connect Secure hosts are impacted by at least one known vulnerability, attack surface management firm Censys warns.
Cloud Security
Apple has scrapped plans to ship a controversial child pornography protection tool for iCloud Photos, a concession to privacy rights advocates who warned it...
Compliance
TikTok was hit Wednesday with a pair of lawsuits from the US state of Indiana, which accused it of making false claims about the...
Application Security
The U.S. government’s mandates around the creation and delivery of SBOMs (software bill of materials) to help mitigate supply chain attacks has run into...
ICS/OT
The US Government Accountability Office (GAO) has urged several federal agencies to conduct cybersecurity-related assessments in an effort to improve the protection of certain...
Cyber Insurance
Cybercrime
California’s Department of Justice mistakenly posted the names, addresses and birthdays of nearly 200,000 gun owners on the internet because officials didn’t follow policies...
Application Security
Pangea Cyber, an early stage startup working on technology in the API security services space, has banked $26 million in a new funding round...
Application Security
Almost exactly a year after the Log4Shell security crisis sent defenders scrambling to reduce attack surfaces, new data shows that remediation has been a...
Application Security
Vulnerability researchers at Google Project Zero are calling attention to the ongoing “patch-gap” problem in the Android ecosystem, warning that downstream vendors continue to...
Compliance
Last month, CISA released cross-sector cybersecurity performance goals (CPGs) in response to President Biden’s 2021 National Security Memorandum on improving cybersecurity for critical infrastructure control...
ICS/OT
The largest U.S. water utility disconnects customer portal and suspends billing services following a cyberattack.
Malware & Threats
Nation-State
Management & Strategy
Data Breaches
Network Security
Identity & Access
Multi-factor authentication is a necessary safeguard, but its limitations show why organizations can't rely on it alone to prevent breaches.
Malware & Threats
