TL;DR for CISOs: Microsoft detailed an attack in which automated operators used a service principal secret exposed in a public Git
Security teams are stretched thin right now. Threats don't wait, alert volumes keep climbing, and operators are expected to stay razor-sharp through brutal 12-hour shifts. Here's a number that should genuinely alarm you: after just 12 minutes of cont
With preliminary use, it uncovered thousands of sensitive flaws, some existing for decades without detection. It found them in every major operating system and web browser.
Mythos’s capabilities don’t not stop there, as it can also create exploits wi
In today’s interconnected digital landscape, quality assurance (QA) has evolved far beyond checking for functional bugs or user experience issues. As software systems become increasingly complex and integrated with cloud platforms, APIs, and third-pa
The power of signals, or indicators, is evident to those who understand them. They are the basis for identity risk intelligence and it’s role in disinformation security. For years, cybersecurity teams have anchored their defenses on Indicators of Com
Imagine this. You’re standing in your kitchen, making toast. Suddenly, you hear a dripping sound. You glance at the sink and notice water pooling around the base. It’s not a flood—yet—but it could be. You investigate the source, tighten a loose pipe,
[Posted on Behalf of Pushkal Mishra, AVP IT & CISO HDFC ERGO Health Insurance Ltd ]
There has been a wide adoption of A.I. (Artificial Intelligence) in the last few years. You might have seen them in chat rooms or on companies’ websites providing y
SACON is India's 1st & Only Security Architecture Conference. With over 70+ participants, this was the 5th edition of SACON and here are a few highlights we wanted to share with you. It was held on 18-19th May, Hotel Hyatt, Pune, India.
We had with u
Lessons from Billions of Breached Records (RSA Conference 2017)
What motivates attackers to dump data publicly? How is it sold, traded and redistributed? These are questions the presenter dealt with while running the ethical data breach search service
Cybersecurity vs. Tokenization (RSA Conference 2017)
Tokenization is the latest data protection method, but does it help or hinder cybersecurity-this is the current debate. This session will look at who, what, where, when, how and why of using tokens.
Our editorial team has handpicked the best of the best talks at RSA Conference - one of the largest IT Security Conference in the world. Following is the list of top Emerging Areas In Security Technology talks at RSA Conference 2017.
RSA Conference he
Mobile Containers—The Good, the Bad and the Ugly (RSA Conference 2017)
This presentation covers the premise of mobile containers and their inherent limitations, from app level to OS level containers. As part of the presentation and in coordination wi
Cloud Security Assessments: You're Doing It Wrong! (RSA Conference)
Moving to the cloud was supposed to increase the speed of business, but progress grinds to a halt once the risk management team gets involved in vetting cloud service providers. Behin
A Successful Application Security Program ‐ Envision Build and Scale (RSA Conference 2017)
Learn how to build an application security program that is successfully integrated into various stages of software development life cycle and product life cycl
A Worldwide Journey to Build a Secure Development Environment (RSA Conference 2017)
We know we need to identify and protect critical assets. But how? If your company develops a multitude of hardware and software products in a global environment it is
Lessons from a Recovering Runtime Application Self-Protection Addict (RSA Conference 2017)
This talk will detail knowledge gained from years spent building runtime application self-protection technology. RASP sounds like a silver bullet—security pixie
