Okta has a standard process that can be abused for nefarious purposes. The legitimate method for changing credential details within Okta (for example, if...
Hi, what are you looking for?
SecurityWeek
Self-disclosures by XIoT vendors have surpassed independent research outfits as the second most prolific vulnerability reporters
More than three-quarters of security professionals in large organizations believe the world is now in a state of perpetual cyberwar – and 82% consider...
Lloyds of London, which describes itself as ‘the world’s leading insurance and reinsurance marketplace’, has clarified its position on war exclusions and cyberattack cover....
Mandiant has been tracking an activity cluster from what it believes is a single Iranian threat group that has been targeting Israeli interests, especially the shipping industry. The activity...
On August 1, Lockheed Martin was supposedly targeted with a DDoS attack delivered by the pro-Russian hacker group Killnet. The information came via the...
It’s not if, but when and how often you get attackedSophos research for its Active Adversary Playbook 2022 revealed that victims are often attacked...
Canadian security firm HYAS Infosec has released a new DNS protection tool dubbed HYAS Confront that was designed to provide clear visibility into DNS transactions...
Enterprise secure browser startup firm Talon Cyber Security has closed a $100 million Series A funding round. The funding was led by Evolution Equity...
New York-based cyber readiness and risk management firm Axio has raised $23 million in a Series B funding round led by ISTARI, with participation...
Global markets have suffered following the first Covid-19 pandemic and the Russian invasion of Ukraine – but sales of cybersecurity software have remained strong....
An ongoing spear phishing campaign has been targeting Facebook business accounts since the second half of 2021. The campaign uses an infostealer specifically designed...
An analysis of the evolution of cybercrime from its beginnings in the 1990s to its billion-dollar presence today has one overriding theme: the development...
California-based Nubeva is building technology to recover encrypted data without making ransomware payments
Startup raises $6M to develop machine learning detection and response (MLDR) platformHiddenLayer is designed to protect the AI machine learning models that protect companies...
In this edition of CISO Conversations, SecurityWeek talked to two vendor CISOs: Chris Morales, CISO at security and analytics firm Netenrich; and Laura Whitt-Winyard,...
While cybersecurity is somewhat insulated from the ravages of the general economy, it is not entirely immune
The NCSC and the ICO have warned UK lawyers not to advise clients to pay a ransom to cybercriminalsIn a letter addressed to UK...
Artificial Intelligence
Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.
Cloud Security
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Malware & Threats