Companies are stopping more cyberattacks, but have room to improve defenses, survey shows

Mick Mulvaney revealed Thursday that the agency had suffered some 240 “lapses” in data security over an unspecified time period, in addition to a suspected 800 other such incidents.

The company says its unique in that it leverages its customers’ existing security infrastructure to respond to that threat and uses AI to determine the intent of a threat.

Carbon Black's SEC filing says it hopes to raise $100 million. The Boston area company provides antivirus and endpoint security services to protect customers from cyberthreats.

Some customers of Delta Airlines and Sears had their credit card information exposed following a data breach last fall at a mutual contractor, the companies announced Wednesday.

The incident at Boeing looks like a tempest in a teapot. But the sting of WannaCry will be with us for years to come.

Major email service providers are teaming up with large corporations like to develop a new email security standard.

Half of the products tested are not using basic email spoofing protection, GCA says.

Corporations need to do more to protect investors from the financial damages of data beaches, an SEC commissioner says.

Lawmakers want to know how to crack down on the monetization of stolen data.

BioCatch proactively collects and analyzes more than 2,000 parameters to generate user profiles and model different types of genuine and malicious behavior.

TLS 1.3 will usher in the largest changes in the protocol's history. Banks want to build in a back door.

Private technology companies are hoping to fill a void left by governments that have continued to face international road blocks to create cyber norms.

The unanimously approved guidance details the ways in which publicly traded companies ought to be transparent with investors and other stakeholders when it comes to cyber risk.

"It is a low risk crime that provides high payoffs. A smart cybercriminal can make hundreds of thousands, even millions of dollars with almost no chance of arrest or jail."

In a new podcast, CyberScoop gets experts to separate fact from fiction when it comes to GDPR.

This week, senior executives from more than 3,000 banks, insurers and other financial services companies doing business in New York will have to personally certify that their computer networks are protected by a cybersecurity program appropriate for their organization’s risk profile.

The Financial Services Information Sharing and Analysis Center is releasing the API in order “to foster universal adoption of a more secure and robust data sharing framework."

An auditor at the Treasury Department commended the IRS for improvements, but said there's still work to be done.

Normally, point-of-sale malware uses HTTP requests to exfiltrate data. Using DNS requests allows attackers to avoid detection.

Perpetrators dress up like repair technicians and then use malware to get the ATM to eject thousands of dollars of cash.