Incident Response
Industry-Wide Cyber Attack Exercises to Help Cyber Threat Preparedness and Response Coordination for the Healthcare Industry
Hi, what are you looking for?
SecurityWeek
Risk Management
The organizations best prepared to face disruption are those that align security, continuity and risk management around what the business cannot afford to lose.
Security Architecture
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum...
Risk Management
Beyond monitoring and compliance, visibility acts as a powerful deterrent, shaping user behavior, improving collaboration, and enabling more accurate, data-driven security decisions.
Mobile & Wireless
The principles cover security, resilience against attacks and disasters, AI, and openness and interoperability.
Identity & Access
Venafi, a Salt Lake City, Utah-based provider of enterprise key and certificate management solutions, has launched a new product that the company describes as...
Application Security
Management & Strategy
The US Department of Defense (DoD) has published an amendment to the Defense Federal Acquisition Supplement which will require defense contractors to incorporate established...
Security Architecture
Building an ROI for Industrial Cyber Security? Start by Measuring the Business Performance of Real-Time Systems.
Management & Strategy
"Offense sells tickets; Defense wins championships"~ Coach Paul "Bear" Bryant Jr.
Incident Response
WASHINGTON - The National Security Agency is gathering email and instant messenger contact lists from hundreds of millions of ordinary citizens worldwide, many of...
Network Security
In the business of domestic and military intelligence the sources and methods for how intelligence is derived are highly protected. This includes the technology...
Network Security
As the first layer of defense in your network, it is important to take a step back and review the design of your perimeter...
Management & Strategy
What Questions Should You Be Asking Security Vendors?
Security Architecture
WASHINGTON - Outgoing US Homeland Security Secretary Janet Napolitano on Tuesday warned of a "major cyber event" in the future that would have a...
Risk Management
Risk Management isn’t Just an Obligation, or Something other Execs Want to See...When Done Right, It really works.
Application Security
While obscuring website code, server architecture, and security mechanisms doesn’t provide bullet-proof security on its own, it can be effective...
Network Security
Cyber Attacks Hitting Global Stock Exchanges are Putting Financial Markets At Risk, According to a New Idustry Report A "significant" number of stock exchanges have...
Data Protection
Cyber-attackers have struck again, this time breaking into over 35,000 accounts on servers operated by video game maker Konami, the latest in a string...
Incident Response
Relying on Threat Actor Behavior Profiles Alone is a Great Way to get an Unwelcomed Outcome...
Cloud Security
Recently, I’ve read a number of reports on IT outsourcing. From those reports, one clear thing has emerged: North American companies have begun to...
Network Security
I recently wrote in this space about the rise of the phrase “continuous monitoring” and the confusion it causes. In a nutshell, federal organizations,...
Audits
In a survey of CIOs, system administrators, and compliance auditors, SANS Institute found that the awareness of the Critical Security Controls is very high,...
Network Security
Trustwave this week unveiled new security information and event management (SIEM) software designed to help businesses better defend against security threats that put sensitive...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)