Security Architecture
Microsoft is experimenting with a major new security mitigation to block attacks targeting flaws in the Windows Common Log File System (CLFS).
Hi, what are you looking for?
SecurityWeek
Security Architecture
While the Security Posture Management buzz is real, its long-term viability depends on whether it can deliver measurable outcomes without adding more complexity.
Security Architecture
Which Security Testing Approach is Right for You: BAS, Automated Penetration Testing, or Both?
Security Architecture
A new GAO report assesses that the Coast Guard needs to improve Maritime Transportation System (MTS) cybersecurity.
Security Architecture
Google’s adoption of memory safe programming languages now includes the deployment of Rust in legacy low-level firmware codebases.
Security Architecture
An inside look at how LinkedIn developed an internal AI-assisted vulnerability management system to protect its massive infrastructure and user base.
Artificial Intelligence
As adversaries increasingly exploit AI, security practitioners must not fall behind. What does it take to unlock the full potential of AI in cybersecurity?
Management & Strategy
Security leaders are facing big decisions about how they use their monetary and people resources to better secure their environments.
Data Protection
A significant cybersecurity challenge arises from managing the immense volume of data generated by numerous IT security tools, leading organizations into a reactive rather...
Security Architecture
Microsoft ships patches for at least 60 security vulnerabilities in the Windows ecosystem and warned of remote code execution risks.
Application Security
Concluding a two-day OSS security summit, CISA details key actions to help improve open source security.
Funding/M&A
California startup banks $20 million Series A financing for technology to help businesses manage the maze of security tools and products.
Management & Strategy
Industry professionals comment on the official release of the NIST Cybersecurity Framework 2.0.
Security Architecture
Researchers at Qualys call attention to a vulnerability in Linux’s GNU C Library (glibc) that allows full root access to a system.
ICS/OT
MITRE and partners unveil EMB3D, a new threat model designed for critical infrastructure embedded devices.
Security Architecture
New CISA alerts shed light on the harm occurring when software vendors fail to implement secure by design principles.
Government
New CISA guidance details cyber threats and risks to healthcare and public health organizations and recommends mitigations.
Government
Some K-12 public schools are racing to improve protection against the threat of online attacks, but lax cybersecurity means thousands of others are vulnerable...
Cloud Security
In response to a spate of embarrassing hacks, Redmond pushes ‘Secure Future Initiative’ promising faster cloud patches, better management of identity signing keys and...
Identity & Access
One of the main reasons why ZTNA fails is that most ZTNA implementations tend to focus entirely on securing remote access.
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
RegisterLearn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.
RegisterExpert Insights
In the end, cybersecurity isn’t just about collecting data. It’s about proving that your defenses actually work.
(Torsten George)
Despite massive investment, the explosion of sophisticated malware and deepfake attacks persists because organizations struggle to verify digital identities and establish fundamental trust.
(Stu Sjouwerman)
Trying to block AI tools outright is a losing strategy. SaaS and AI are increasingly inseparable, and AI isn’t limited to tools like ChatGPT or Copilot anymore.
(Alastair Paterson)
CTI, digital brand protection and other cyber risk initiatives shouldn’t only be utilized by security and cyber teams.
(Marc Solomon)
Sightline Security’s founder explains why nonprofits need cybersecurity solutions tailored to their unique missions — and why vendors need to listen.
(Jennifer Leggio)