Cloud Security
Recently, I’ve read a number of reports on IT outsourcing. From those reports, one clear thing has emerged: North American companies have begun to...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right.
Artificial Intelligence
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
Artificial Intelligence
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
Cybersecurity Funding
The startup founded by Palo Alto Networks’ Nir Zuk has raised $290 million to build an AI-native security platform for highly regulated organizations that...
Network Security
I recently wrote in this space about the rise of the phrase “continuous monitoring” and the confusion it causes. In a nutshell, federal organizations,...
Audits
In a survey of CIOs, system administrators, and compliance auditors, SANS Institute found that the awareness of the Critical Security Controls is very high,...
Network Security
Trustwave this week unveiled new security information and event management (SIEM) software designed to help businesses better defend against security threats that put sensitive...
Identity & Access
Cisco is revamping its security ecosystem to increase the focus on its Identity Services Engine, which would help enterprises deploy layered defenses without increasing...
Cloud Security
When the subject of public cloud computing comes-up, it is inevitable that the concept of ‘risk’ soon follows. Often, the ‘risk’ of public cloud...
Security Architecture
On Tuesday, during the House’s Energy and Commerce Committee's cybersecurity hearing, Representatives Henry Waxman and Ed Markey released a report detailing the risks faced...
Network Security
Recent problems with revoking SSL certificates have renewed discussion on whether the certificate system is still sufficient to protect users on the Internet.
Management & Strategy
There is an old saying in the business world, that if you want to get ahead, don’t bring your boss problems, bring him or...
Network Security
Splunk, the maker of software that helps organizations gather and make use of machine data from a diverse set of sources, today released the...
Network Security
Scaling a company or even just a critical application within a company can be as scary as it is exciting. For starters, often you...
ICS/OT
ICS-CERT has issued a warning this week after vulnerability details concerning Mitsubishi’s MX Component started to gain attention online. The MX Component is an...
Network Security
Last week at the RSA Conference, nCircle surveyed 205 people about their thoughts on various security measures and their effectiveness against state-sponsored attacks. The...
Network Security
The recent New York Times hack was yet another high-profile attack that demonstrated the evolution towards multi-vector, sophisticated attacks. In this case, the mission...
Management & Strategy
It’s easy to feel uncertainty about where to start to properly cover all the bases when it comes to securing your infrastructure. Evolving security...
Security Architecture
The Internet has made virtually any information accessible to someone who is determined to find it. This is great when you need to quickly...
Security Architecture
LONDON - The British military's dependence on information technology means it could be "fatally compromised" by a cyber-attack but the government seems unprepared for...
Application Security
Yearly predictions are always risky. Even more so when your subjects are cybercrime organizations, hacktivist groups, and other security attackers – entities not exactly...
Management & Strategy
IBM Report Says Security is a Top Barrier to Adoption in Business Analytics, Mobile, Social Business and CloudAs business demand for mobile, cloud, social...
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)