Identity & Access
Critical vulnerabilities in enterprise virtual private network (VPN) solutions from Palo Alto Networks, Fortinet and Pulse Secure allow attackers to infiltrate corporate networks, obtain...
Hi, what are you looking for?
SecurityWeek
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Security Architecture
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum...
Artificial Intelligence
The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation.
Network Security
Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination...
Network Security
In 2017, a category called Breach and Attack Simulation (BAS) tools made its first appearance on the Gartner Hype Cycle for Threat-Facing Technologies, positioned...
Management & Strategy
California’s state auditor raised alarms Tuesday about information security in some state offices and called for additional oversight and regular assessments.
Network Security
Businesses Are Increasingly Adopting Zero-Trust Principles for Authentication in a Mobile World
Security Infrastructure
Mozilla is taking the first step toward denying a request by United Arab Emirates-based DarkMatter to be included as a top-level certificate authority in...
Application Security
The U.S. Coast Guard on Monday issued a safety alert advising commercial vessel owners and operators to ensure that effective cybersecurity measures are in...
Application Security
Security information and event management (SIEM) solutions provider Exabeam this week announced the acquisition of cloud application security company SkyFormation.
Cybersecurity Funding
TrapX Security, a Silicon Valley-based company that provides cyber defense solutions powered by deception technology, on Monday announced that it raised $18 million in...
Nation-State
On June 25, 2019, Cybereason reported that hackers, most likely China's state affiliated APT10 group, had comprehensively hacked numerous telecommunications companies around the world.
Application Security
Vulcan Cyber, an Israel-based startup that specializes in vulnerability remediation solutions, on Wednesday announced that it raised $10 million in a Series A funding...
Audits
A new report from the U.S. Senate’s Committee on Homeland Security and Governmental Affairs has revealed the decade-long failure of several important federal agencies...
ICS/OT
Indegy on Thursday announced the general availability of CIRRUS, a new industrial cybersecurity-as-a-service (ICSaaS) offering.CIRRUS is designed to help organizations of all sizes monitor...
Application Security
Apple this week unveiled the latest version of its Mac operating system, macOS 10.15 Catalina. In addition to many functionality improvements, the latest macOS...
Network Security
Security Infrastructure
The Security Vendor Space is Extremely Noisy and Increasingly Out of Touch With the Needs of the Enterprise
Cybersecurity Funding
AttackIQ, a California-based company that specializes in continuous security validation, on Wednesday announced that it raised $17.6 million in a Series B funding round,...
Security Infrastructure
Sectigo (formerly Comodo CA) says it revoked more than 100 digital certificates following a report from Chronicle that thousands of malware samples found on...
Cloud Security
Siemens and Alphabet-owned cybersecurity firm Chronicle this week announced a partnership whose goal is to provide industrial monitoring and detection solutions for the energy...
Cloud Security
Gartner’s latest IT spending forecast predicts that spending on data center systems will reach $195 billion in 2019, but decrease to $190 billion through...
Cybersecurity Funding
Hunters.AI, an Israel-based company specializing in autonomous threat hunting, on Wednesday emerged from stealth mode and announced that it raised $5.4 million in seed...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)