Security Infrastructure
Threat Intelligence Can be Used to Support Effective and Automated Incident Response
Hi, what are you looking for?
SecurityWeek
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Security Architecture
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum...
Artificial Intelligence
The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation.
Network Security
Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination...
Cloud Security
Illumio, a company that specializes in securing data centers and cloud environments through micro-segmentation, on Thursday announced that it raised $65 million in a...
Network Security
Fortinet this week announced new FortiGate Next-Generation Firewalls (NGFWs), which help customers improve security through implementing Intent-based Segmentation.
Security Infrastructure
US officials are fanning out across Europe to warn about the security risks of allowing Chinese telecoms giant Huawei to help build 5G mobile...
Endpoint Security
Audits
A US energy company, identified by some media reports as Duke Energy, received a $10 million fine from the North American Electric Reliability Corporation...
Application Security
Salt Security emerged from stealth mode on Tuesday with a solution designed to identify and prevent API attacks, and $10 million in funding.
Cloud Security
Amazon Web Services (AWS) on Wednesday announced the launch of Amazon WorkLink, a service that enables organizations to provide employees easy and secure access...
Security Infrastructure
Free and open Certificate Authority (CA) Let’s Encrypt today started the process of completely retiring TLS-SNI-01 validation support.
ICS/OT
Japanese electronics and electrical equipment giant Mitsubishi Electric Corporation on Monday unveiled new technology designed to protect connected vehicles against cyber threats.
Audits
The Payment Card Industry Security Standards Council (PCI SSC) this week announced new security standards for the design, development and maintenance of payment software.
Incident Response
The failure of President Donald Trump and the Democratic Party to reach an agreement over funding for the controversial Mexico border wall has led...
Application Security
Onapsis, a company specializing in cybersecurity and compliance solutions for enterprise resource planning (ERP) products, on Wednesday announced that it has entered a definitive...
Compliance
The number of US government domains for which TLS certificates were left to expire due to the government shutdown has now exceeded 130, UK-based...
Risk Management
A business risk intelligence (BRI) program requires many components about which I’ve written previously: the right intelligence requirements, collection strategy, KPIs, vendors,
Application Security
Rapid7 on Friday announced the release of Metasploit 5.0. The latest major version of the popular penetration testing framework introduces several new important features,...
Security Infrastructure
As concern over the full cyber purpose of China and its state-sponsored hackers grows, two senators have introduced a bi-partisan bill aimed at protecting...
Funding/M&A
Internet infrastructure giant Akamai Technologies on Monday announced the acquisition of Janrain, a Portland, Oregon-based company specializing in identity and access management (IAM).
ICS/OT
Industrial cybersecurity firm Claroty on Tuesday announced significant enhancements to its threat detection product, along with technology integrations with several cybersecurity, network infrastructure and...
Security Infrastructure
Embattled Chinese telecoms giant Huawei has agreed to British intelligence demands over its equipment and software as it seeks to be part of the...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)