Risk Management
Organizations That Do Not Invest Even in Baseline Security Are Realistically Uncompetitive
Hi, what are you looking for?
SecurityWeek
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Security Architecture
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum...
Artificial Intelligence
The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation.
Network Security
Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination...
Compliance
DigiCert has addressed the concerns raised by Mozilla and others regarding the company’s acquisition of Symantec’s certificate business after some web browser vendors announced...
Management & Strategy
Cryptonite, a Rockville, Maryland-based startup that aims to prevent reconnaissance and lateral movement in the network using moving target defense and micro-segmentation technologies, has...
Cybersecurity Funding
Security analytics firm Skybox announced Wednesday that it has secured $150 million growth equity comprising $100 million from CVC Capital Partners’ Growth Fund (CVC...
Endpoint Security
The latest version of Symantec Endpoint Protection, SEP 14.1, adds new capabilities to the signatureless machine learning malware detection SEP product it introduced last...
Audits
The growing acceptance that it is impossible to detect and block all malware at the perimeter requires some form of response to malware post-breach....
Security Infrastructure
Cybersecurity Awareness Month is, once again, upon us. At its core is an issue that can have a massive impact on organizations in every...
Risk Management
After more than 145 million customer records were compromised in the Equifax data breach, the company’s stock plummeted by more than 30 percent. That...
Security Infrastructure
5G is here. New cellular networks are being planned and rolled out around the world, exciting consumers and enterprises alike with the promise of...
Security Infrastructure
Akamai Technologies announced on Wednesday that it has agreed to acquire Nominum, a privately-held provider of DNS security solutions for carriers and enterprises.
Audits
Cyber resilience company UpGuard announced on Tuesday the launch of a new product designed to help organizations automate risk assessment for third-party vendors.
Cybercrime
Many utility executives from around the world believe cyberattacks could cause disruptions to electric distribution grids in the next five years, according to a...
Network Security
NIST has published an update on its work on the new Secure Internet Domain Routing (SIDR) standards designed to provide the internet the security...
Cloud Security
Oracle announced this week at the company’s OpenWorld convention the launch of new cloud security services and improvements to existing products.
Application Security
A report published on Tuesday by mobile security firm Appthority reveals which Android and iOS applications are most frequently blacklisted by enterprises.
Cloud Security
Many companies are not prepared to deal with DNS attacks, and a quarter of the ones that have already been hit reported significant losses,...
Management & Strategy
The U.S. Senate has passed the MAIN STREET Cybersecurity Act on Sept. 28, which will require NIST to "disseminate clear and concise resources to...
Security Infrastructure
Compliance
The Internet Corporation for Assigned Names and Numbers (ICANN) announced this week that the replacement of the root zone key signing key (KSK) for...
Data Protection
Open Whisper Systems announced this week that it’s working on a new private contact discovery service for its privacy-focused communications app Signal.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)