Management & Strategy
Rapid7 has been designated as a Common Vulnerability and Exposures (CVE) Numbering Authority (CNA), which enables the security firm to assign CVE identifiers to...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right.
Artificial Intelligence
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
Artificial Intelligence
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
Cybersecurity Funding
The startup founded by Palo Alto Networks’ Nir Zuk has raised $290 million to build an AI-native security platform for highly regulated organizations that...
Security Architecture
Facebook has launched a free online tool, named Certificate Transparency Monitoring, that allows users to obtain information on the digital certificates issued for a...
Security Architecture
The increasing volume and sophistication of cyberattacks over the last few years has resulted in millions of dollars of investments in new cybersecurity startups,...
Security Architecture
Trying to Focus on Everything at Once is the Same as Focusing on Nothing at All...
Management & Strategy
I’m often asked why I run a team entirely dedicated to researching, developing and implementing various program frameworks – when so many security organizations...
Incident Response
Security has evolved to the point that I can now say that collection, sensing, and alerting are yesterday’s news. How can I make such...
Network Security
Starting on June 16, 2016, the old SSLv3 and RC4 security protocols will no longer be supported on Google’s SMTP servers and on Gmail’s...
Security Architecture
The Electronic Frontier Foundation (EFF) on Thursday announced Certbot, a Let's Encrypt client designed to help websites encrypt their traffic.
Security Architecture
The Value of Knowing More About Threats is Limited When it Cannot be Applied to Prevent Threats
Security Architecture
Karamba Security, a company specializing in solutions designed to protect connected cars from cyberattacks, has come out of stealth mode with $2.5 million raised...
Security Architecture
“What’s the cut, Papa?”“Juicy, Junior. Real juicy.”
Management & Strategy
Unlike the Common Cold, Security Professionals Have the Ability to Treat the Root Case of Problems
Data Protection
Data Science and Machine Learning Can Help Enterprises Keep Pace with Faster and More Automated Cyber Threats
Cyber Insurance
Our modern world is strewn with cyber breaches, a proliferation of dangers, regional crises, political unrest, and dangerous threat actors – all at play...
Network Security
Free and open Certificate Authority (CA) Let’s Encrypt announced this week that it has issued more than 1 million certificates since issuing its first...
Management & Strategy
Those who read my pieces regularly likely realize that I enjoy writing on topics around which I see a lack of clarity. Whenever possible,...
Network Security
Multi-Vector DDoS Attacks on the Rise, Survey Shows
Security Architecture
The Tor Project, the organization behind the Tor anonymity network, announced this week at a security conference that it plans on launching a bug...
Security Architecture
The technology that drives the shadowy cryptocurrency bitcoin is drawing interest from the established banking industry, which sees a potential to revolutionize the sector.
Security Architecture
Microsoft on Thursday announced that it plans on removing trust on root certificates issued by 11 Certificate Authorities (CAs) in January 2016.
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)