X-Force reported over 35% of the cloud security incidents it responded to in the last year involved valid-but-stolen credentials by attackers.

The five most targeted vulnerabilities on the list are all related to Microsoft’s products including Office, WordPad and Windows.

The move aims to optimize threat detection and response, streamline security workflows and boost productivity among security professionals.

Software security supply chains are complicated enough, and artificial intelligence and large language model supply chains even more so. This calls for a new approach

Cloud computing company VMware is rolling out expanded security capabilities in its VMware Cloud.

From "old reliable" MPLS, and why it isn't going away anytime soon, to the next-gen 5G vRAN, our coverage this week ran the gamut of technology.

The contest goals are to both produce new AI cybersecurity tools and "show how AI can be used to better society,” said DARPA's Perri Adams.

The report also found victims of multiple ransomware attacks were over six times more likely to experience a second attack within three months.

Building and deploying applications, and the speed of current processes, leads to new vulnerabilities and misconfigurations. CNAPP can help

The Network Resilience Coalition has been launched to address the persistent lack of network hardware and software security resilience and patching.

The White House is developing an Executive Order and pursuing bipartisan legislation to regulate the AI industry.

"I am only as secure as my weakest link – my weakest vendor," Extreme Networks CIO John Abel said.

This week was about cybersecurity -- avoiding vulnerabilities, learning more about them, or CISOs dealing with the consequences.

Security experts noted Bishop Fox’s findings reflect the overall trend of delayed patching and the need for easier and automatic patching processes.

For now, the vendor has not released any software updates to address this high-severity vulnerability in its Nexus 9000 fabric series switches.

The survey showed 90% of respondents consider the use of a single cloud security platform with one dashboard to be moderately to extremely helpful.

"We can't afford to maintain critical dependencies that could become a ‘weapon’ against our interests,” the European Union's Thierry Breton wrote.

Mandiant CTO Charles Carmakal warns any organization that used MOVEit in May 2023 could have potentially been exploited by the threat actor — CL0P.

The cloud provider announced the public preview of its new Amazon CodeGuru Security at this year’s AWS re:Inforce event.

Google Cloud security products increase efforts to combine AI and cybersecurity with several new and enhanced products and partnerships.

CrowdStrike President Michael Sentonas argues artificial intelligence alone cannot identify and respond to novel threats and attack tactics.

A majority of enterprise applications depend on hundreds of open source projects, but that software exists in a world with few guardrails.

Orca Security noted the top issues are “not the newest and most talked about,” so a focus on security basics is the best solution.

Dynatrace CEO Rick McConnell forecasts “the number of use cases that involve both observability and security is going to explode."