Malware & Threats
Malware is increasingly shifting to peer-to-peer communications when receiving instructions from command-and-control servers and transferring stolen data to evade detection, Damballa said in a...
Hi, what are you looking for?
SecurityWeek
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Security Architecture
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum...
Artificial Intelligence
The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation.
Network Security
Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination...
Network Security
Juniper Networks this week announced the availability of Junos DDoS Secure, a new offering designed to protect data centers against increasingly complex Distributed Denial...
Management & Strategy
In an interview for the June issue of SIGNAL Magazine, General Keith Alexander, director of the NSA and commander of the U.S. Cyber Command,...
Application Security
On Tuesday, Jerry Davis, the VA’s former CISO, told members of the House Veterans' Affairs oversight and investigations subcommittee the sensitive personal information the...
Network Security
I just finished two weeks of travel – part in Washington DC, part at a Wall Street conference. In both arenas, continuous monitoring is...
Management & Strategy
ABOARD A US MILITARY AIRCRAFT - The United States must develop "rules of the road" with China and other countries to mitigate cyberthreats, Pentagon...
Security Infrastructure
BEIJING - A Pentagon report accusing Chinese hackers of accessing US weapons designs contained "misjudgements", a spokesman for Beijing's defence ministry said Thursday, adding...
Incident Response
JERUSALEM - An organization calling itself the "Syrian Electronic Army" has launched a cyber attack against the water distribution system of Haifa, Israel's third...
Incident Response
It appears the Chinese cyber-espionage crew behind attacks on as many as 100 businesses is cutting back on some of its attacks and looking...
Network Security
Layered security may be security best practice, but many of the current technologies don't appear to be detecting and blocking exploits, according to recent...
Compliance
Tripwire, a provider of security risk and compliance management tools, this week launched its NERC Solution Suite, a combination of customized tools and services...
Management & Strategy
WASHINGTON - A high-powered commission said Wednesday that intellectual property theft was costing the United States the equivalent of all its exports to Asia...
Funding/M&A
Blue Coat Systems is no longer the Web filtering company you knew it as. The company, founded in 1996 as CacheFlow, has come full...
Data Protection
Anyone who’s a Game of Thrones fan knows that fortifying the castle walls is essentially useless if the structures and people inside are not...
Management & Strategy
The U.S. General Services Administration (GSA) has issued a request for information (RFI) that it hopes will help make the federal government's cybersecurity more...
Incident Response
The U.S. Department of Homeland Security (DHS) is developing a system that will enable classified vulnerability data to be shared with the private sector. The...
Network Security
Recent problems with revoking SSL certificates have renewed discussion on whether the certificate system is still sufficient to protect users on the Internet.
Incident Response
With Brobot as a Prime Example, it is Apparent that we Need a Large-scale, Machine-to-Machine Approach to Information Sharing.
Network Security
Trust comes at a price. However, while IT security professionals understand this, they often treat trust as an afterthought. As a result, companies suffer...
Network Security
While it’s Important to Continue to Bolster Defenses, we Need to Increase our Resiliency in the Face of Relentless Attacks.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)