2,380 articles · page 10 of 48
Help Net Security, Tuesday, October 14th, 2025
Every sizable organization invests heavily in firewalls, SIEMs, EDRs, and countless other technologies that form the backbone of a modern enterprise's cyber defenses.
more →
CIO, Tuesday, October 14th, 2025
Security teams are racing to combat AI-driven attacks with more sophisticated tools and enhanced control over their own AI.
more →
Security Boulevard, Tuesday, October 14th, 2025
Your users aren't downloading files to their desktops anymore. They're not running local applications. They're working in Google Docs, Salesforce, Slack, and dozens of other browser-based platforms. The endpoint-the place where work actually happens-has moved entirely into the browser.
more →
CSO Online, Monday, October 13th, 2025
Security experts believe many cyber tabletops try to be too specific, while others argue they should focus on smaller, more nuanced attacks, as those are more likely what security teams will face.
more →
Search Security, Wednesday, October 8th, 2025
DeepSeek poses significant risks to U.S. enterprises -- even those that don't greenlight it for internal use. CISOs should take steps to reduce the threat.
more →
CSO Online, Wednesday, October 8th, 2025
AI agents are automating key parts of the attack chain, threatening to tip the scales completely in favor of cyber attackers unless new models of AI-assisted cyberdefense arise.
more → Help Net Security, Tuesday, October 7th, 2025
Bot farms have moved into the center of information warfare, using automated accounts to manipulate public opinion, influence elections, and weaken trust in institutions.
more → Dark Reading, Tuesday, October 7th, 2025
In a recent poll, readers shared how they're using vibe coding in AppDev (if they are at all). While some found success, others found the risks too great.
more →
ITPro, Monday, October 6th, 2025
The market for enterprise browsers is growing fast - but are their features and security controls enough to compete with free applications?
more →
InfoQ, Monday, October 6th, 2025
This week's Java roundup for September 29th, 2025, features news highlighting: JEP 527, Post-Quantum Hybrid Key Exchange for TLS 1.3; the proposed JDK 26 release schedule; the release of Mandrel 25 and Seed4j; milestone releases of GlassFish 8.0 and 7.1; the beta release of WildFly 38; and point releases of Spring AI, Helidon, Micronaut, LangChain4j, Gatherers4j and Keycloak.
more →
Blocks & Files, Monday, October 6th, 2025
Any organization that has not been hit by ransomware thinks, by default, that its defenses are good.
more →
Dark Reading:, Thursday, October 2nd, 2025
With SMS, voice, and QR-code phishing incidents on the rise, it's time to take a closer look at securing the mobile user.
more → Cyber Defense Magazine, Thursday, October 2nd, 2025
As identity security becomes increasingly critical in cybersecurity, the focus has shifted from safeguarding human identities to protecting Non-Human Identities (NHIs)-such as API keys, service accounts, secrets, tokens, and certificates.
more →
SC Media, Wednesday, October 1st, 2025
In a world dominated by generative artificial intelligence (GenAI), automation, and advanced security platforms, many security pros might expect Cybersecurity Awareness Month (CAM) to spotlight modern security strategies such as threat intelligence feeds, AI‑powered malware detection, and zero‑trust architectures.
more →
CSO Online, Wednesday, October 1st, 2025
The expiration of a landmark cybersecurity law strips liability protections for cyber threat information sharing, leaving US cyber defenses weaker until lawmakers act.
more → Security Boulevard, Wednesday, October 1st, 2025
Understanding Identity and Access Management (IAM)
more → ET Insights, Wednesday, October 1st, 2025
When the pandemic accelerated the shift to remote and hybrid contact centers, it wasn't simply a matter of moving headsets from office floors to home offices.
more →
Dark Reading:, Tuesday, September 30th, 2025
A researcher-developed framework could enable attackers to conduct real-time conversations using simulated audio to compromise organizations and extract sensitive information.
more → Cyber Defense Magazine, Monday, September 29th, 2025
Cybersecurity isn't a game of defense-it's a game of anticipation. Yet too many CISOs and security leaders still think in terms of controls, compliance, and detection thresholds.
more → Help Net Security, Friday, September 26th, 2025
Instead of going after software flaws or network weaknesses, attackers are targeting something much easier to steal: identity credentials. A new report from BeyondID calls this growing black market the identity economy, where usernames, passwords, tokens, and access rights are bought and sold much like items on a regular online marketplace.
more → Help Net Security, Friday, September 26th, 2025
Ransomware activity is climbing again, with a steep increase in the number of victims and the number of groups launching attacks. A new mid-year report from Searchlight Cyber shows how quickly the threat landscape is shifting and why CISOs need to keep adjusting their defenses.
more → Help Net Security, Thursday, September 25th, 2025
Distributed denial-of-service (DDoS) attacks remain one of the most common and disruptive forms of cybercrime. Defenders have traditionally focused on detecting these attacks once they are underway.
more → Cyber Defense Magazine, Thursday, September 25th, 2025
In early 2024, the BlackCat ransomware attack against Change Healthcare caused massive disruption across the U.S. healthcare sector. It later emerged that the cause of this major national incident was traced back to compromised credentials used to remotely access a Change Healthcare Citrix portal. Access to the portal wasn't secured with multi-factor authentication (MFA).
more → Search Security, Wednesday, September 24th, 2025
Secure your API landscape with these API discovery best practices spanning the entire SDLC. Find hidden endpoints, audit integrations and monitor continuously.
more → Help Net Security, Wednesday, September 24th, 2025
Attackers have a new favorite playground, and it's not where many security teams are looking. According to fresh data from Bugcrowd, vulnerabilities in hardware and APIs are climbing fast, even as website flaws hold steady.
more → SecurityBrief, Wednesday, September 24th, 2025
As Cybersecurity Awareness Month approaches its 22nd year in October, the perennial theme of "Secure Our World" resonates more urgently than ever.
more →
Security Boulevard, Wednesday, September 24th, 2025
In early September, Palo Alto Networks publicly acknowledged that Secure Web Gateways (SWGs) are architecturally unable to defend against Last Mile Reassembly attacks.
more → Help Net Security, Tuesday, September 23rd, 2025
By 2030, preemptive cybersecurity solutions will account for 50% of IT security spending, up from less than 5% in 2024, replacing standalone detection and response (DR) solutions as the preferred approach to defend against cyberthreats, according to Gartner.
more → Security Boulevard, Tuesday, September 23rd, 2025
Okay, so here's the thing about passwords: we all hate 'em, right? It's like, are they even doing anything anymore?
more → Search Security, Monday, September 22nd, 2025
The REST architectural style helps applications communicate with each other. Be sure RESTful APIs have the protections necessary to keep attackers at bay.
more → techradar.pro, Monday, September 22nd, 2025
From deepfake fraud to API exploits and logic flaws, fintechs are facing a new wave of AI-driven cyber threats
more →
DARKREADING, Monday, September 22nd, 2025
Zero Trust could help organizations fight back against attackers who use artificial intelligence, but new threats will require the architecture to evolve.
more → computerweekly.com, Monday, September 22nd, 2025
Cyber security experts offer insights into how to manage service levels, potential lock-in clauses and security gaps in IT supplier contracts
more →
Backup Central, Monday, September 22nd, 2025
When most people think about cybersecurity, they picture hackers in hoodies breaking through firewalls from some remote location.
more →
Security Boulevard, September 20,2025
Understanding Vulnerability Management in the Enterprise Context
more → DARKReading, September 19,2025
As Splunk celebrates the 10th anniversary of Boss of the SOC competition, it continues to be a valuable platform for security professionals to test their skills, learn new techniques, and potentially advance their careers.
more → Techradar, September 19,2025
IT leaders are increasingly worried about AI-powered attacks
more → Security Boulevard, September 18,2025
How Can We Achieve Better NHI Security?
more → Security Boulevard, September 18,2025
For compliance leaders, legal teams, and executives, staying static means falling behind: missed deadlines, unexpected liabilities, and reputational risk are now real dangers. This article walks through the evolving compliance landscape in 2025, showing how organizations can anticipate shifts, build resilient programs, and adapt not just to survive but to prosper in a world where regulatory uncertainty is the new normal.
more → Help Net Security, September 18,2025
Hiring new employees has always carried some risk, but that risk is growing in new ways, and identity fraud is becoming more common in the hiring process. HireRight's 2025 Global Benchmark Report takes a close look at how organizations around the world are handling background screening. The findings come from more than 1,100 HR and risk management professionals across North America, EMEA, and APAC.
more → SC Media, September 17,2025
Dissecting a $250M breach - How one of North America's largest banks, despite a strong cybersecurity posture, fell victim to a chained cloud exploit that exposed more than 100 million customer records.
more → Analytics Insight, September 16,2025
A Detailed Overview of How Cybercriminals Use Advanced Technology to Create Fake Websites and Scam the Masses
more →
Security Boulevard, September 15,2025
The Password Problem: Why Passwordless?
more → The Hacker News, September 15,2025
Attacks that target users in their web browsers have seen an unprecedented rise in recent years. In this article, we'll explore what a "browser-based attack" is, and why they're proving to be so effective.
more →
DARKReading, September 15,2025
CISA's Secure by Design planted a flag. Now, it's on those who care about safeguarding systems to pick up the torch and take action to secure systems throughout the enterprise.
more → Help Net Security, September 15,2025
Most enterprise AI activity is happening without the knowledge of IT and security teams. According to Lanai, 89% of AI use inside organizations goes unseen, creating risks around data privacy, compliance, and governance.
more → SC Media, Friday, September 12th, 2025
Speed has always been a priority in security operations. But in today's SOC, speed without precision can exacerbate the damage of a cyberattack. A hasty, overbroad automated response can disrupt core systems and business operations, eroding trust and driving costs.
more → Help Net Security, Wednesday, September 10th, 2025
AI agents are being deployed inside enterprises today to handle tasks across security operations. This shift creates new opportunities for security teams but also introduces new risks.
more → Help Net Security, Wednesday, September 10th, 2025
Breaches continue to grow in scale and speed, yet the weakest point remains unchanged: people. According to Dune Security's 2025 CISO Risk Intelligence Survey, over 90 percent of incidents still originate from user behavior rather than technical flaws.
more → Security Boulevard, Wednesday, September 10th, 2025
In today's interconnected world, securing your organization's digital assets and ensuring only the right people have access is paramount. Identity and Access Management (IAM) software provides the crucial framework to achieve this, controlling who can access what information and resources.
more →