Cloud Security
ESET on Thursday announced the general availability of a new line of enterprise security solutions that include endpoint detection and response (EDR), forensic investigation,...
Hi, what are you looking for?
SecurityWeek
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Security Architecture
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum...
Artificial Intelligence
The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation.
Network Security
Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination...
Security Infrastructure
The NIST Small Business Cybersecurity Act Aims to Provide Cyberdefense Resources
Security Infrastructure
A publicly accessible Amazon S3 bucket was found storing documents apparently detailing GoDaddy infrastructure running in the Amazon AWS cloud, UpGuard reveals.
Security Infrastructure
Let’s Encrypt root, ISRG Root X1, is now trusted by all major root programs, including Microsoft, Google, Apple, Mozilla, Oracle, and Blackberry.
Cybercrime
Several payment processing companies in the United States were targeted recently in BGP hijacking attacks whose goal was to redirect users to malicious websites,...
Security Infrastructure
I really do not want to do this. I really do not want to use this quote, as it has been referenced hundreds of...
Security Infrastructure
The DHS National Cybersecurity Summit will bring together a diverse group of stakeholders across government, industry, and academia to reinforce DHS’s collective defense mission...
Malware & Threats
Organizations increasingly have to deal with cyberattacks targeting the software supply chain and in many cases they are not adequately prepared to respond to...
Application Security
The U.S. National Institute of Standards and Technology (NIST) announced on Tuesday that its Computer Security Division has decided to withdraw eleven outdated SP...
Cybersecurity Funding
Verodin, a Virginia-based company that helps organizations assess the effectiveness of their cybersecurity controls, on Tuesday announced that it has raised $21 million in...
Funding/M&A
AT&T on Tuesday said it would acquire San Mateo, Calif.-based threat management and intelligence firm AlienVault for an undisclosed sum.
Security Infrastructure
UK Financial Authorities' Paper on Resilience Potentially Silos Continuity from Data Protection
Data Protection
The Wi-Fi Alliance, the non-profit organization whose global network of members maintains Wi-Fi technology, announced late on Monday the launch of the WPA3 security...
Cybersecurity Funding
Israel-born startup Intsights Cyber Intelligence has raised $17 million in a Series C funding round led by Tola Capital. It brings the total capital...
Network Security
By Controlling Security Technology Portion Size, Organizations Can Better Address Strategic Requirements and Work More Efficiently
Compliance
Australia will help fund and build an underseas communications cable to the Solomon Islands, it was agreed Wednesday, after the Pacific nation was convinced...
Application Security
Machine data solutions firm Splunk announced Monday that it has agreed the acquisition of alert management start-up VictorOps for approximately $120 million. The acquisition...
Security Infrastructure
Many enterprises have been taking stock of their security architecture as well as assessing gaps and redundancies (see last month’s article Wading Through Tool...
Incident Response
A couple of years ago, I had a conversation with a CISO that has stuck with me. His Board of Directors had dramatically increased...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)