All Articles

What Actually Drives Pentest Pricing

Penetration testing quotes vary by an order of magnitude for what looks, on paper, like the same deliverable: "a pentest of our application." The variance is not random or purely a function of vendor markup. It co

The security company Fingerprint discovered how on Firefox browsers, websites could track users even if they used private browsing tabs or the anonymity focused TOR browser. Mozilla closed the vulnerability in Firefox 150, that was released on April

A great example of how uninformed leaders (in this case of cybersecurity) who does not understand the assignment and leaks sensitive data via an AI chat tool.

Even though the US Cybersecurity and Infrastructure Security Agency has a policy that forbid

In 2026, your data is either your greatest asset or your biggest legal debt. There is no middle ground.

Technology is moving faster than ever, the old rules for protecting data simply don’t work anymore.

This Data Privacy Week, we invited five industry

We had an amazing CISOPlatform Roundtable in Delhi on 4th Dec, hosted as a closed-door session on "Inside the Silent Battlefield: Intelligence Insights on Cyber Threats" with S

I spoke at the Black Hat Conference in Las Vegas for the first time since the COVID-19 pandemic. Here’s what I learned and a few takeaways to share.

I just returned from Black Hat in Las Vegas, and once again, AI dominated all conversations on b

The Complexity of Software Supply Chains

Software supply chains are vast and intricate, much like the global manufacturing processes behind the latest technology products. Take an iPhone, for example. Millions of people contribute to its development,

The brutal reality is that cybersecurity predictions are only as valuable as their accuracy. As 2024 comes to a close, I revisit my forecasts to assess their utility in guiding meaningful decisions.

Anyone can make predictions (and far too many do), b

Black Hat USA continues to be the proving ground for some of the most provocative, forward-thinking cybersecurity research in the world. In 2024, as the lines between AI governance, supply chain security, and offensive research blurred further, the c

There are big predators in our digital world. In recent keynotes I have been talking about the big 4 aggressive nation states and how they are heavily investing in offensive cyber capabilities that trickles down to everyday cybercriminals.  

Cybersec

Are you attending RSA Conference 2024? To make the most of your time at RSAC, we've curated a list of leading application security (AppSec) companies categorized by booth location. Follow this guide to navigate efficiently and connect with these inno

[Posted on behalf of Dan Lohrmann, Chief Strategist & Chief Security Officer Security mentor, Inc.]

Our editorial team has handpicked some great talks from Black Hat Conference - one of the largest IT Security Conference in the world. 

Black Hat - built by and for the global InfoSec community - returns to Las Vegas for its 21st year providing attend

White hat defense systems continue to improve on supervised learning sets using machine and deep learning neural networks to defend against an exploding attack surface. Zombies that require commands from botnet herders are becoming intelligent, capab

Cloud Security: Automate or Die (RSA Conference)

Much has been said about DevOps and SecDevOps for security automation and integration. However, to many in the security community, this is still a buzzword. There are many practical applications of auto