DARPA veteran Dan Kaufman has joined Badge as SVP, AI and Cybersecurity.
Kelly Shortridge has been promoted to VP of Security Products at Fastly.
After the passing of Amit Yoran, Tenable has appointed Steve Vintz and Mark Thurmond as co-CEOs.
Former Wiz executive Trish Cagliostro has joined Orchid Security as Chief Revenue Officer.
Transcend has named former UnitedHealth Group CISO Aimee Cardwell as CISO in Residence.
With unapproved AI tools entrenched in daily workflows, experts say it’s time to shift from monitoring to managing Shadow AI use across the enterprise.
A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions.
A SonicWall SMA 100 series vulnerability patched in 2021, which went unnoticed at the time of patching, is being exploited in the wild.
While the Security Posture Management buzz is real, its long-term viability depends on whether it can deliver measurable outcomes without adding more complexity.
Our collective voices and one community will provide the intelligence we need to safeguard our businesses in today’s modern digital environment.
Very few people in the cybersecurity industry do not know, or know of, Bryson Bort, CEO/Founder of SCYTHE and the co-founder of ICS Village.
The greatest security policies in the world are useless if enterprises don’t have a reasonable, consistent, and reliable way to implement them.
While often relegated to a purely functional role, DNS offers unparalleled opportunities for preemptive defense against cyberattacks.
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
This webinar will guide you in aligning your security testing strategy with the right tools, helping you move beyond identifying weaknesses to effectively validating your overall security posture.
Register
The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [August 19-20, 2025 | Ritz-Carlton, Half Moon Bay]
SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place August 19-20 at the Ritz-Carlton, Half Moon Bay, CA. (www.cisoforum.com)
The Threat Detection & Incident Response Summit delves into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization. [May 21, 2025 – Virtual]
SecurityWeek’s Cloud and Data Security Summit returns with a deliberate focus on exposed attack surfaces and weaknesses in public cloud infrastructure and APIs. [July 16, 2025 – Virtual]
-
A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions. (April 18, 2025)
-
Atlassian and Cisco have released patches for multiple high-severity vulnerabilities, including remote code execution bugs. (April 17, 2025)
-
Servers exposed to complete takeover due to CVE-2025-32433, an unauthenticated remote code execution flaw in Erlang/OTP SSH. (April 17, 2025)
-
A SonicWall SMA 100 series vulnerability patched in 2021, which went unnoticed at the time of patching, is being exploited in the wild. (April 17, 2025)
-
Noteworthy stories that might have slipped under the radar: 4chan hacked, auto-reboot security feature coming to Android, Iranian administrator of Nemesis charged in US. (April 18, 2025)
-
Minh Phuong Ngoc Vong pleaded guilty to defrauding US companies of roughly $1 million in a fake IT worker scheme. (April 17, 2025)
-
Organizations in the healthcare and pharmaceutical sectors have been targeted with ResolverRAT, a new malware family with advanced capabilities. (April 14, 2025)
-
Threat actors are publishing malicious NPM packages to steal PayPal credentials and hijack cryptocurrency transfers. (April 14, 2025)
