Security Architecture
Microsoft ships patches for at least 60 security vulnerabilities in the Windows ecosystem and warned of remote code execution risks.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right.
Artificial Intelligence
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
Artificial Intelligence
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
Cybersecurity Funding
The startup founded by Palo Alto Networks’ Nir Zuk has raised $290 million to build an AI-native security platform for highly regulated organizations that...
Application Security
Concluding a two-day OSS security summit, CISA details key actions to help improve open source security.
Funding/M&A
California startup banks $20 million Series A financing for technology to help businesses manage the maze of security tools and products.
Management & Strategy
Industry professionals comment on the official release of the NIST Cybersecurity Framework 2.0.
Security Architecture
Researchers at Qualys call attention to a vulnerability in Linux’s GNU C Library (glibc) that allows full root access to a system.
ICS/OT
MITRE and partners unveil EMB3D, a new threat model designed for critical infrastructure embedded devices.
Security Architecture
New CISA alerts shed light on the harm occurring when software vendors fail to implement secure by design principles.
Government
New CISA guidance details cyber threats and risks to healthcare and public health organizations and recommends mitigations.
Government
Some K-12 public schools are racing to improve protection against the threat of online attacks, but lax cybersecurity means thousands of others are vulnerable...
Cloud Security
In response to a spate of embarrassing hacks, Redmond pushes ‘Secure Future Initiative’ promising faster cloud patches, better management of identity signing keys and...
Identity & Access
One of the main reasons why ZTNA fails is that most ZTNA implementations tend to focus entirely on securing remote access.
Government
CISA and the HHS have released resources for healthcare and public health organizations to improve their security.
Data Protection
The feared ‘cryptopocalypse’ (the death of current encryption) might be sooner than expected – caused by in-memory computing ASICs rather than quantum computers.
Security Architecture
Noteworthy stories that might have slipped under the radar: Ex-Uber security chief files appeal, tech giants announce new security offerings.
Government
CISA has released new guidance on how federal agencies can integrate identity and access management into their ICAM architecture.
CISO Strategy
Peiter ‘Mudge’ Zatko joins the US government's cybersecurity agency to preach the gospel of security-by-design and secure-by-default development principles.
Management & Strategy
CISA, NSA, and NIST urge organizations to create quantum-readiness roadmaps and prepare for post-quantum cryptography migration.
Network Security
The NSA and CISA have published guidance on hardening 5G standalone network slices against potential threats.
Security Architecture
VMware partners with tech giants to accelerate the development of confidential computing applications.
Security Architecture
The framework helps evaluate the effectiveness of obfuscation side-channel mitigation schemes against data leaks.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)