Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
According to Mandiant’s M-Trends report, organizations are discovering breaches in their networks faster, but still not nearly soon as they must in order to contain damage and prevent loss of sensitive data.
The Heartbleed vulnerability is "catastrophic” for SSL and Internet security, Bruce Schneier, told SecurityWeek. “On the scale of 1 to 10, this is an 11,” he said. Here is what organizations need to know and what actions they should take.
Defense.Net is a startup providing DDoS mitigation as a service. SecurityWeek sat down with CTO and Founder Barrett Lyon to discuss the security startup.
AT&T is offering a new cloud-based security solution designed to protect customers against malware and malicious websites while offering security policy control across enterprise, web, social and mobile networks.
Entrust launched a new cloud-based service that consolidates the management of digital identities, SSL certificates and credentials via a single solution platform.
McAfee and Siemens said that the two companies would extend an existing partnership designed to help industrial customers protect against cyber threats.
Bradford Networks, a provider of threat response solutions, unveiled a new offering designed to help organizations rapidly contain advanced cyber threats.
A plan unveiled last month would see the US relinquish its key oversight role for the Internet, handing that over to "the global multi-stakeholder community."
Seattle, Washington-based network security firm WatchGuard Technologies has added a new level of defense to its Unified Threat Management (UTM) and Next-Gen Firewall (NGFW) appliances to help block Advance Persistent Threats.
McAfee’s report explains how Advanced Evasion Techniques (AETs), are used to evade detection for long periods of time.
- 1 of 152
- ››
FEATURES, INSIGHTS // Security Infrastructure
The shaping of the threat intelligence management market is critical to its success, and there is much confusion about the very term “threat intelligence.” I am a firm believer that intelligence is a process, not an individual thing, and that Intelligence is not “done.” It is “created.”
Security practitioners have long had a love-hate relationship with automation, and for good reason.
A threat is the agent that takes advantage of a vulnerability. This relationship must be a key factor in the risk assessment process and can no longer be treated as risk’s neglected step child.
As enterprises become increasingly focused on security, it’s important to take an honest look not just at what security measures are in place, but how they are really used.
When you start your metrics program, you'll find that a great deal of information can be gleaned from existing data that gets stored in various places – most likely in your system logs.
The most advanced technology in the world is only as good as the people and systems behind it. Otherwise your sophisticated security device is nothing more than a paperweight.
Trying to defend against modern, advanced attacks with one-off point solutions is like playing a whack-a-mole game, always one step behind the attacker and trying to play catch up with the alerts as they’re received.
The oversight for the protection of healthcare information is only getting tighter, and it is incumbent upon the security teams to ensure healthcare professionals have all the tools necessary to improve patient outcomes, while we worry about keeping the bad guys away.
By properly segregating the network, you are essentially minimizing the level of access to sensitive information for those applications, servers, and people who don’t need it, while enabling access for those that do.
The NIST Cybersecurity Framework is a good first step towards creating a standardized approach to cyber security, but requires many substantial updates before really improving our nation’s cyber resilience.
- 1 of 50
- ››
Subscribe to SecurityWeek
- China's Shadow to Follow Obama Around Asia - Analysis
- Hackers of Oman News Agency Target Bouteflika
- Kaspersky Lab Names New North America Chief, Unveils Enterprise Security Strategy
- Heartbleed Flaw Used to Bypass Two-factor Authentication, Hijack User Sessions: Mandiant
- GAO Report Knocks SEC for Cybersecurity Failings
- Attackers Less Reliant on Botnets to Launch Powerful DDoS Attacks: Akamai
- Satellite Telecom Vulnerable to Hackers: Researchers
- Shaping the Threat Intelligence Management Market
- Snowden Questions Putin on Surveillance in Phone-in
- Microsoft Updates Threat Modeling Tool
Copyright © 2014 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use