Data Protection
A recently discovered variant of the KillDisk malware encrypts files and holds them for ransom instead of deleting them. Since KillDisk has been used...
Hi, what are you looking for?
SecurityWeek
Government
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.
Data Protection
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.
Risk Management
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
Compliance
The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.
ICS/OT
The number of attacks aimed at industrial control systems (ICS) increased by 110 percent in 2016 compared to the previous year, according to data...
Risk Management
The Healthcare Industry Has a complex Relationship with Security, Compliance, and Legislation
Data Protection
Inflight Internet and entertainment provider Gogo has announced the launch of a Bugcrowd-based public bug bounty program covering the company’s main websites.
Management & Strategy
During the past year, you may have noticed a shift in the way IT and security professionals talk about cyber security. Historically, firewalls, DLP,...
Risk Management
As New Technologies Infiltrate the Enterprise, Security Practitioners Must Apply a More Holistic Approach to Enterprise Risk Management
Application Security
Cyber Insurance
Insurance is an increasingly important option for cyber defense -- but a new survey shows a remarkable difference in attitude between different geographical areas....
Data Protection
IT systems connected to pagers leak data that can be highly valuable to malicious actors looking to gather intelligence on the organizations they want...
Application Security
Researchers discovered what they believe to be a critical vulnerability in a PwC product designed for securing SAP systems, but the vendor has downplayed...
Cyber Insurance
The global cyber insurance market is expected to generate $14 billion by 2022, according to a new report published by Allied Market Research (AMR)....
Risk Management
The 2017 Global Cybersecurity Assurance Report Card shows a six point fall from last year's rating -- down from 76% to 70% (marked as...
Risk Management
It’s No Longer Feasible to Manage Threats Individually, Given the Sheer Volume of Security Gaps That Exist.
Incident Response
After a year of a divisive political climate, Thanksgiving comes at a welcome time.
Risk Management
The pivotal role of cybersecurity during the recent United States presidential election has underscored the critical need to focus on a secure electoral process.
Data Protection
Hollywood sure knows how to maximize value. That’s why we have long strings of sequels, prequels and movie plot reuse that stretch across generations....
Risk Management
I have lost count of the number of conversations I’ve either observed or been involved in where people simply aren’t listening to one another....
Risk Management
Investment research firm Muddy Waters and security company MedSec have published four new videos allegedly demonstrating potentially lethal attacks against implanted cardiac devices from...
Risk Management
Implementing a Zero Trust Model Represents a Dramatic Change and Requires a Well-planned Transition
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)