Security Infrastructure
Less than 1% of the top 1 million websites have yet to replace Symantec-issued certificates before major browsers distrust them, DigiCert announced this week.
Hi, what are you looking for?
SecurityWeek
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Security Architecture
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum...
Artificial Intelligence
The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation.
Network Security
Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination...
Security Infrastructure
Take Relevance Into Account When Analyzing Threat Data
Application Security
Luminate, a U.S. and Israel-based company that specializes in securing access to corporate applications in hybrid cloud environments, emerged from stealth mode on Wednesday...
Security Infrastructure
People are creatures of habit. If we learn something one way, we’re prone to stick to it. Less in a “my way or the...
Security Infrastructure
US chipmaker Qualcomm postponed its annual shareholders' meeting after secretly requesting a national security review of Broadcom's bid to take over the company, the...
Security Infrastructure
Certificate Authority (CA) DigiCert on Wednesday announced the en-masse revocation of more than 23,000 HTTPS certificates after certificate reseller Trustico sent over the private...
Security Infrastructure
GitHub this week permanently disabled a series of weak cryptographic standards across its software development platform in an attempt to better protect users.
ICS/OT
Palo Alto Networks on Tuesday announced that it has updated its PAN-OS operating system and released a new next-generation firewall designed for use in...
ICS/OT
The U.S. Department of Energy announced this week that it’s creating a new Office of Cybersecurity, Energy Security, and Emergency Response (CESER).
Cyberwarfare
Dispel, a U.S.-based company that specializes in secure communication and collaboration systems, on Thursday announced the launch of a new product designed to help...
Management & Strategy
The Starbucks Effect is Pervasive in the IT Industry and Threat Intelligence is Also Affected by That Movement
Management & Strategy
HackerOne on Thursday announced the results of a bug bounty challenge run by the U.S. Air Force on its platform. More than $100,000 were...
Data Protection
Major web browser vendors plan on restricting the use of the Application Cache (AppCache) feature to secure connections in an effort to protect users...
Cloud Security
Two more misconfigured databases exposing the personal details of thousands of people were disclosed late last week.
Security Infrastructure
Digital Transformation Without an Equivalent Security Transformation is Leaving Organizations More Vulnerable
Security Infrastructure
Technology consulting firm Booz Allen has been awarded a $621 million contract by the Department of Homeland Security (DHS) to support the government-wide Continuous...
Security Infrastructure
Companies must be wary of chasing shiny new threats with shiny new defenses, while leaving legacy systems vulnerable to legacy malware.
Audits
The Identity & Access Management (IAM) service in the Google Cloud Platform (GCP) now includes a feature that allows users to assign custom roles...
Network Security
Detecting and Stopping the Stealthiest Threats With Behavioral Analytics
Security Infrastructure
Over the next five years, the threat intelligence market is predicted to grow more than 18% a year and reach nearly $9 billion by...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)