Cloud Security
Web performance and security solutions provider Cloudflare announced this week that all customers will benefit from unmetered mitigation against distributed denial-of-service (DDoS) attacks, and...
Hi, what are you looking for?
SecurityWeek
Government
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.
Data Protection
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.
Risk Management
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
Compliance
The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.
Data Protection
Just as Apple launched the latest version of macOS, High Sierra 10.13, a researcher published a video to show how unsigned applications can steal...
Cybercrime
Oracle has released patches for many of its products to address several vulnerabilities in the Apache Struts 2 framework, including one that has been...
Cyberwarfare
The U.S. Department of Homeland Security (DHS) has finally notified the states whose systems were targeted by hackers before last year’s presidential election.
Audits
A federal judge has dismissed three of the six counts in a complaint filed in January by the U.S. Federal Trade Commission (FTC) against...
Data Protection
The way some companies have set up support systems can expose their internal communications to malicious actors, warned a researcher who used a newly...
Disaster Recovery
Equifax has made another blunder following the massive data breach suffered by the company – it advised some customers on Twitter to access a...
Malware & Threats
A team of researchers from Israel has developed a piece of malware that demonstrates how hackers can abuse security cameras with infrared (IR) capabilities...
Data Protection
A vulnerability found in Apache HTTP Server (httpd) can cause certain systems to leak potentially sensitive data in response to HTTP OPTIONS requests, a...
Cloud Security
DigitalOcean is warning customers that some 1-Click applications running MySQL have an account with the same default password across all instances, and the company...
Risk Management
Partnership Integrates BitSight’s Security Ratings Capabilities With CyberGRX Third-Party Cyber Risk Exchange
Application Security
Equifax has shared more details about the recent breach that affects roughly 143 million U.S. consumers, including how it discovered the unauthorized access and...
Compliance
After the U.S. Department of Homeland Security (DHS) issued a binding operational directive ordering government departments and agencies to stop using products from Russia-based...
Compliance
The U.S. Department of Homeland Security (DHS) issued a binding operational directive on Wednesday ordering government departments and agencies to stop using products from...
Application Security
IT security services company SEC Consult on Wednesday disclosed the details of several unpatched vulnerabilities affecting IBM’s InfoSphere DataStage and Information Server data integration...
Cybersecurity Funding
The United States Department of Energy announced on Tuesday its intention to invest up to $50 million in the research and development of tools...
Identity & Access
Billions of Android, iOS, Windows and Linux devices that use Bluetooth may be exposed to a new attack that can be carried out remotely...
Audits
Minnesota-based speciality medical device manufacturer Smiths Medical is working to address several potentially serious vulnerabilities affecting some of the company’s wireless syringe infusion pumps.
Risk Management
Have a safe trip! Typically, when we wish someone well before they leave on a journey we are referring to their physical safety while...
Cyberwarfare
A group of cyberspies believed to be operating out of Russia has been observed targeting energy facilities in the United States and other countries,...
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)