Compliance
Slack on Monday announced the introduction of Enterprise Key Management, an Enterprise Grid add-on feature that gives customers complete control over their encryption keys.
Hi, what are you looking for?
SecurityWeek
Risk Management
The organizations best prepared to face disruption are those that align security, continuity and risk management around what the business cannot afford to lose.
Security Architecture
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum...
Risk Management
Beyond monitoring and compliance, visibility acts as a powerful deterrent, shaping user behavior, improving collaboration, and enabling more accurate, data-driven security decisions.
Mobile & Wireless
The principles cover security, resilience against attacks and disasters, AI, and openness and interoperability.
Incident Response
Cyber-security provider Secureworks this week announced it can now help organizations better protect their environments with its new Orchestration and Automation solution.Announced at the...
Audits
The Wireshark Foundation on Thursday announced the general availability of Wireshark 3.0.0, the newest release of the popular open-source packet analyzer.
Management & Strategy
For the last few months, it’s been hard to avoid Marie Kondo. Author of The Life-Changing Magic of Tidying Up, and star of the...
Cloud Security
Microsoft on Thursday unveiled two new cloud-based security products and services — Microsoft Azure Sentinel and Microsoft Threat Experts — designed to make it...
Endpoint Security
Security Architecture
US charges against Chinese telecoms giant Huawei have cranked up tensions between the world's two biggest economies, but the company is already facing obstructions...
Application Security
Salt Security emerged from stealth mode on Tuesday with a solution designed to identify and prevent API attacks, and $10 million in funding.
Cloud Security
Amazon Web Services (AWS) on Wednesday announced the launch of Amazon WorkLink, a service that enables organizations to provide employees easy and secure access...
Audits
The Payment Card Industry Security Standards Council (PCI SSC) this week announced new security standards for the design, development and maintenance of payment software.
Incident Response
The failure of President Donald Trump and the Democratic Party to reach an agreement over funding for the controversial Mexico border wall has led...
Risk Management
A recently published report from the United States Department of Defense (DoD) Inspector General shows that, while the Department has improved its security posture,...
Audits
A team of researchers, including experts involved in the discovery of the Meltdown and Spectre vulnerabilities, have disclosed a new type of side-channel attack...
Artificial Intelligence
The Cybersecurity Industry Doesn't Have Artificial Intelligence Right Yet, But it is Promising Technology
Security Architecture
Technical Information of U.S. Ballistic Missile Defense System is Improperly Protected, Audit FindsSecurity controls and processes necessary to protect ballistic missile defense system (BMDS) technical information...
Application Security
Amazon Web Services on Wednesday announced the launch of AWS Security Hub, a service designed to aggregate and prioritize alerts from AWS and third-party...
ICS/OT
While the Common Vulnerability Scoring System (CVSS) can be useful for rating vulnerabilities, the scores assigned to flaws affecting industrial control systems (ICS) may...
Audits
The U.S. Office of Personnel Management (OPM) has improved its security posture since the data breaches disclosed in 2015, but many issues are still...
Identity & Access
Google on Monday announced the launch of reCAPTCHA v3, which aims to improve user experience by removing the need for challenges.
Application Security
IBM Security on Monday unveiled a new cloud-based platform that combines the company's own capabilities with data, applications and tools from more than a...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)