Risk Management
If you are part of a security team that spends time carefully piecing together and reviewing corporate IT security policies, this may hurt your...
Hi, what are you looking for?
SecurityWeek
ICS/OT
The guidance details steps organizations can take to isolate vital OT and supporting systems, and operate in isolation for an extended period.
Risk Management
Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.
Risk Management
Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences.
Cybersecurity Funding
The company is enhancing third-party risk management (TPRM) through autonomous AI agents.
Risk Management
Symantec today shared some details on Symantec Control Compliance Suite 11, the next generation of its enterprise-class IT governance, risk and compliance (GRC) solution....
Incident Response
VeriSign has admitted to falling victim to several attacks in 2010 that resulted in information being swiped from their servers.
Risk Management
New Solution Helps Enterprises Discover, Understand and Block Malware Utilizing Big Data AnalyticsSourcefire today introduced a new malware protection and analysis solution designed to...
Endpoint Security
An Endpoint Protection Best Practices survey from Symantec, which was conducted last October by Applied Research, shows that organizations following best practices for protecting...
Management & Strategy
There are some things that the best CIOs and IT managers can’t prevent entirely as they depend on other people. An example of this...
Application Security
Software-as-a-Service (SaaS) security solutions vendor Qualys, today announced updates to its QualysGuard Web Application Scanning suite, including the ability to integrate with Selenium, the...
Endpoint Security
Executives need to be mindful that software non-compliance within their organization can result in serious financial risks for the company.
Data Protection
Operating with blinders on, whether you are riding a bike, running a business or operating a technology enterprise can be a recipe for serious...
Management & Strategy
Does your Security policy take the Carrier into Consideration? Does it Require Users to Change the Default PIN?
Incident Response
As Long as Attackers are Organized and We’re not, We’re Losing an Asymmetric War.
Incident Response
On Thursday, Rep. Mike Rogers, the Chairman of the House Intelligence Committee, announced that the House Permanent Select Committee on Intelligence (HPSCI) had opened...
Incident Response
Dedicated Appliance Brings Real-Time Threat Identification, Dynamic Scoring, Recursive Assessment and Predictive Analysis NitroSecurity, the SIEM solutions provider set to be acquired by McAfee,...
Application Security
Business Logic Attacks - Stealthly, and Often Hard to Call Illegal, These Fraudulent Attacks Can Cost Organizations Big Money
Risk Management
A Strong Risk Management Strategy can Provide Efficiencies and Cost Savings in Security Operations.
Risk Management
Balancing Risk and Reward in Information Security: Are you Willing to Spend X to Avoid Y?My daughters tell me that I am too careful and...
Management & Strategy
A recent study focused on the concerns and challenges within the IT industry revealed that enterprise-level participants lack confidence in their organization’s overall security...
Cybercrime
Silver Tail Systems, a provider of fraud prevention solutions for Web sites, this week announced that it has secured funding from Citi Ventures, a...
Cybercrime
Solution providers and policy makers from both worlds need to meet up and share ideas, thoughts and experience for the benefit of both.
Application Security
If Patch Tuesday is a party, this would be the IT security version of pre-gaming.On Aug. 9, Microsoft accidentally released information on the five...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)
Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most challenging balancing acts.
(Tod Beardsley)