Data Protection
Researchers have discovered a new side-channel attack method that can be launched against devices with Intel processors, and the patches released in response to...
Hi, what are you looking for?
SecurityWeek
Security Architecture
While the Security Posture Management buzz is real, its long-term viability depends on whether it can deliver measurable outcomes without adding more complexity.
Security Architecture
Which Security Testing Approach is Right for You: BAS, Automated Penetration Testing, or Both?
Security Architecture
A new GAO report assesses that the Coast Guard needs to improve Maritime Transportation System (MTS) cybersecurity.
Security Architecture
Google’s adoption of memory safe programming languages now includes the deployment of Rust in legacy low-level firmware codebases.
Data Protection
The Internet Engineering Task Force (IETF) last week announced the approval of version 1.3 of the Transport Layer Security (TLS) traffic encryption protocol. The...
ICS/OT
Many oil and gas companies in the Middle East reported suffering at least one serious security incident in the past year, according to a...
Data Protection
Intel announced on Thursday that patches designed to address the Spectre vulnerability are now available for all the affected CPUs released in the past...
Audits
AMD is investigating claims that its processors are affected by more than a dozen serious vulnerabilities, and the company that found the flaws is...
ICS/OT
The U.S. Department of Energy announced this week that it’s creating a new Office of Cybersecurity, Energy Security, and Emergency Response (CESER).
Cyberwarfare
Dispel, a U.S.-based company that specializes in secure communication and collaboration systems, on Thursday announced the launch of a new product designed to help...
Management & Strategy
HackerOne on Thursday announced the results of a bug bounty challenge run by the U.S. Air Force on its platform. More than $100,000 were...
Data Protection
Major web browser vendors plan on restricting the use of the Application Cache (AppCache) feature to secure connections in an effort to protect users...
Audits
The Identity & Access Management (IAM) service in the Google Cloud Platform (GCP) now includes a feature that allows users to assign custom roles...
Cybersecurity Funding
Cylus Obtains $4.7 Million in Funding to Help Protect Rail Industry Against CyberattacksCylus, an Israel-based startup that specializes in cybersecurity solutions for the rail...
Malware & Threats
Facebook announced on Monday that it’s prepared to award $100,000 grants for research proposals focusing on improving online security, privacy and safety.
Application Security
Tel Aviv, Israel-based startup PureSec emerged from stealth mode on Wednesday with a security platform designed for serverless architectures and a guide that describes...
Audits
Assessments conducted last year by the U.S. Department of Homeland Security’s Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) showed that boundary protection remains...
ICS/OT
Organizations that provide solutions for critical infrastructure sectors, including medical device and industrial control systems (ICS) manufacturers, have started assessing the impact of the...
Endpoint Security
AMD has informed customers that it will soon release processor microcode updates that should mitigate one of the recently disclosed Spectre vulnerabilities, and Microsoft...
Cloud Security
Several major tech companies have started releasing patches and mitigations for the recently disclosed Meltdown and Spectre vulnerabilities affecting CPUs from Intel, AMD and...
Data Protection
Details of "Meltdown" and "Spectre" Attacks Against Intel and AMD Chips Disclosed
Compliance
Government agencies in the United States have made progress in the implementation of the DMARC standard in response to a Department of Homeland Security...
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
RegisterLearn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.
RegisterExpert Insights
In a rapidly changing AI environment, CISOs are worried about investing in the wrong solution or simply not investing because they can’t decide what the best option is.
(Marc Solomon)
Adopting a layered defense strategy that includes human-centric tools and updating security components.
(Stu Sjouwerman)
A strong AI deployment starts with asking the right questions, mapping your risks, and thinking like an adversary — before it’s too late.
(Matt Honea)
It’s time for enterprises to stop treating unmanaged devices as an edge case and start securing them as part of a unified Zero Trust strategy.
(Etay Maor)
Many security professionals feel pressured to pursue leadership roles, but success can also mean going deeper, not just higher.
(Joshua Goldfarb)