Security Architecture
Researchers at Qualys call attention to a vulnerability in Linux’s GNU C Library (glibc) that allows full root access to a system.
Hi, what are you looking for?
SecurityWeek
Risk Management
The organizations best prepared to face disruption are those that align security, continuity and risk management around what the business cannot afford to lose.
Security Architecture
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum...
Risk Management
Beyond monitoring and compliance, visibility acts as a powerful deterrent, shaping user behavior, improving collaboration, and enabling more accurate, data-driven security decisions.
Mobile & Wireless
The principles cover security, resilience against attacks and disasters, AI, and openness and interoperability.
ICS/OT
MITRE and partners unveil EMB3D, a new threat model designed for critical infrastructure embedded devices.
Security Architecture
New CISA alerts shed light on the harm occurring when software vendors fail to implement secure by design principles.
Government
New CISA guidance details cyber threats and risks to healthcare and public health organizations and recommends mitigations.
Government
Some K-12 public schools are racing to improve protection against the threat of online attacks, but lax cybersecurity means thousands of others are vulnerable...
Cloud Security
In response to a spate of embarrassing hacks, Redmond pushes ‘Secure Future Initiative’ promising faster cloud patches, better management of identity signing keys and...
Identity & Access
One of the main reasons why ZTNA fails is that most ZTNA implementations tend to focus entirely on securing remote access.
Government
CISA and the HHS have released resources for healthcare and public health organizations to improve their security.
Data Protection
The feared ‘cryptopocalypse’ (the death of current encryption) might be sooner than expected – caused by in-memory computing ASICs rather than quantum computers.
Security Architecture
Noteworthy stories that might have slipped under the radar: Ex-Uber security chief files appeal, tech giants announce new security offerings.
Government
CISA has released new guidance on how federal agencies can integrate identity and access management into their ICAM architecture.
CISO Strategy
Peiter ‘Mudge’ Zatko joins the US government's cybersecurity agency to preach the gospel of security-by-design and secure-by-default development principles.
Management & Strategy
CISA, NSA, and NIST urge organizations to create quantum-readiness roadmaps and prepare for post-quantum cryptography migration.
Network Security
The NSA and CISA have published guidance on hardening 5G standalone network slices against potential threats.
Security Architecture
VMware partners with tech giants to accelerate the development of confidential computing applications.
Security Architecture
The framework helps evaluate the effectiveness of obfuscation side-channel mitigation schemes against data leaks.
Application Security
New guidance from CISA and the NSA provides recommendations on securing CI/CD pipelines against malicious attacks.
Security Architecture
New SaaS-based secrets manager from Akeyless requires no new infrastructure, and no specialist staff nor secrets management team.
Endpoint Security
Microsoft is making SMB signing a default requirement in Windows 11 Enterprise editions, starting with insider preview build 25381.
Security Architecture
When teams have a way to break down enterprise silos and see and understand what is happening, they can improve protection across their increasingly...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)