Network Security
The distributed denial of service attacks against financial institutions continue, with Capital One, SunTrust, and Regions Financial being the latest victims. Capital One Financial...
Hi, what are you looking for?
SecurityWeek
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Security Architecture
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum...
Artificial Intelligence
The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation.
Network Security
Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination...
Application Security
The Industrialization of Hacking Has Created a Wave of Threats That are Increasingly Sophisticated
Cybercrime
Universities face unique challenges keeping their servers and networks secure from cyber-criminals while accommodating the influx of student and faculty-owned devices each year. A...
Security Infrastructure
Iranian official Mohammad Reza Golshani, head of the communications and IT of the NIOOC (Nat’l Iranian Offshore Oil Company), said that Israel launched a...
Security Infrastructure
Less than two years after being aquired by Intel, McAfee said that it will be laying off a "small percentage" of the now-security division's roughly 7,100...
Network Security
BEIJING - Chinese telecom firm Huawei's ambitions to become a global brand rivalling Apple and Samsung have been hit by a US report claiming...
Network Security
GENEVA - The United States will oppose any major revision to 24-year-old global telecommunications regulations at an international conference in December, the head of...
Mobile & Wireless
BEIJING - Beijing on Monday urged Washington to "set aside prejudices" after a draft Congressional report said Chinese telecom firms Huawei and ZTE were...
Security Infrastructure
Committee Says Chinese Telcoms Failed to Provide Adequate Answers On Relationship With Chinese GovernmentWASHINGTON - Chinese telecom giants Huawei and ZTE pose a security...
Network Security
New details have emerged about the attack toolkit that was used to launch the distributed denial of service (DDoS) attacks against a number of...
Management & Strategy
As long as human intelligence remains an unsolved mystery, we cannot expect a security system to provide us with a complete solution...Over the past...
Malware & Threats
Two lawmakers are asking the United States Food and Drug Administration to start thinking more about how to secure medical devices from cyber-attacks.
Network Security
While it may be years before Keccak (pronounced “catch-ack”) is adopted for wide use, that doesn’t take away from the new cryptographic hash algorithm’s...
Network Security
A series of unusually large and highly sophisticated DDoS attacks that hit various organizations last month appear to have used a highly sophisticated toolkit,...
Audits
Today at Oracle OpenWorld, Oracle announced the release of Oracle Identity Governance Suite, an important component of Oracle Identity Management 11g Release 2, which was...
Application Security
Stealth security startup Cylance has acquired Ridgeway Internet Security, a software company specializing in Web application firewalls and honeypot technology.
Cloud Security
As You Adopt Cloud and Virtualization Technologies in Your Data Center, What Security Requirements Change, and What Stay The Same?
Black Hat
“Ma and Pop sleep with door unlocked” LOUISVILLE - DerbyCon - Saturday afternoon, SecurityWeek sat down with Ryan Sevey, an information security consultant for...
Security Infrastructure
LOUISVILLE - DerbyCon – Day two of DerbyCon, which is the only full day of the event (9:00 a.m. – 7:00 p.m.), is taking...
Network Security
LOUISVILLE - DerbyCon – During his talk on Friday, Rapid7’s HD Moore presented findings to attendees of DerbyCon, which are the result of his...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)