Malware & Threats
The need to maintain security over the supply chain has been confirmed by alerts issued at the end of last week by both IBM...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.
Supply Chain Security
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published.
Supply Chain Security
LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Cybercrime
The Association of British Travel Agents (ABTA) today informed users of a breach that may have affected up to 43,000 customers.
Management & Strategy
Many of the most high-profile breaches have been a result of weak links in an organization’s supply chain. The cyber attacks on Target, Home...
Risk Management
When it comes to cybersecurity, the common tact is to build out your network defenses and then extend to endpoints. But as business becomes...
Malware & Threats
A paper published aims to demonstrate that developing rootkits for devices running Cisco IOS doesn’t require advanced knowledge or the resources of a nation...
ICS/OT
Manufacturing supply chains are vital to the development and fulfillment of any modern technology—they change rapidly as sectors overlap, products evolve, and global locations...
Risk Management
I have regular conversations with Derek Byrum, the chief data scientist at our company, where I ask him “what’s jumping out at you?” as...
Management & Strategy
The National Institute of Standards and Technology (NIST) has released an updated draft of guidelines for evaluating risk in the supply chain. The organization...
Risk Management
Microsoft on Tuesday released updated versions of white papers focused on software supply chain security and critical infrastructure protection.
Risk Management
Performing a Vendor Risk Management Process as Part of Normal Business Operations is an Important Step in Securing the Supply Chain
Cybercrime
Kaspersky Lab has uncovered details on what they believe is a small yet sophisticated and determined group of attackers targeting several industrial and high...
Network Security
IT supply chain integrity issues are real, and will have mainstream enterprise IT impact within the next five years, Gartner analysts wrote in a...
Security Infrastructure
The Department of Energy (DOE), Department of Justice (DOJ), and the Department of Homeland Security (DHS) need to tighten procedures and controls when it...
Cybercrime
While it may be unrealistic to completely lock down an organization’s cyber supply chain, companies need to take a look at how products up...
Security Infrastructure
A consortium of experts has published a preview of standards meant to improve the security of the global supply chain for commercial software and...
Supply Chain Security
Student Hackers Develop New Design Techniques to Protect Against Vulnerabilities in Vital Components in the Electronics Supply Chain
Cybercrime
Do you remember those ’80s and ’90s movies that portrayed the same hacker over and over, just in a different setting? It was always...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)