Channel
Conference, briefing, training, hearing, and industry-event coverage that tracks where security leaders, researchers, regulators, and vendors are gathering.
RSAC 2026 Conference Deep Dive: How Agentic AI, Shadow AI, Identity Security, and Community Collaboration Impact Enterprise Security Strategy, with Actionable Defense Recommendations.
Global cybersecurity event Black Hat USA 2026 officially concluded, with AI security and emerging threats becoming the core themes of this year's conference. From the perspective of enterprise security decision-makers, this article analyzes the industry signals released by the conference and provides defense recommendations.
SecurityPost.org, based on the 2026 calendar of 60+ cybersecurity and AppSec conferences released by DerScanner, analyzes global security conference trends to provide reference for corporate security decision-making.
Cloud Security Alliance (CSA) announced a new collaboration with the Cybersecurity Research Institute at the University of Nevada, Las Vegas and RSAC to launch the AI Vulnerability Storm Summit, aiming to strengthen cutting-edge AI security research, vulnerability response, and industry education. This article analyzes the impact of this initiative on enterprise AI security governance.
The number of security conferences has exceeded 4,700. How can enterprise decision-makers extract strategic value from them? This article analyzes conference theme trends and participation strategies for 2026-2027.
This week saw the emergence of multiple critical vulnerabilities, including WordPress core RCE, SonicWall SMA zero-day, and SharePoint RCE zero-day. At the same time, new malware targeting AI services and cryptocurrency wallets has appeared. Enterprises need to urgently assess the impact and take defensive measures.
This week's security incidents cover Iran's use of ad metadata and cellular roaming protocols to track US military phones, a new CrashStealer macOS malware disguised as crash reports to steal information, and the release of a Coordinated Vulnerability Disclosure (CVD) blueprint by CISA and other agencies. These events respectively reveal mobile geographic tracking risks, new information theft techniques on the macOS platform, and progress in standardizing enterprise vulnerability disclosure.
Summary of Important Cybersecurity Events This Week: U.S. Department of Homeland Security's HSIN database hacked; Adobe announces twice-monthly security updates; Canadian Communications Security Agency proactively disrupts ransomware infrastructure; QuimaRAT cross-platform trojan sold on the dark web; Abnormal AI refutes Anthropic's trademark infringement allegations; AssuranceAmerica data breach affects 7 million people; NSA relaunches TAO elite hacker unit; FBI warns of TeamPCP supply chain attack.
A researcher going by the alias Bikini has published PoC code on GitHub for dozens of zero-day vulnerabilities in multiple open-source projects, including FFmpeg, Gogs, Gitea, Ghidra, 7-Zip, OpenVPN, and VLC, with nine of them having received CVE IDs. This has sparked renewed concerns among enterprises about the security of open-source software supply chains.
This week, Tata Electronics suffered a major data breach, with 630GB of confidential files exposed, involving the supply chains of Apple and Tesla. Meanwhile, the Five Eyes issued an AI threat warning, China's 360 launched a Mythos-like AI attack system, and Snyk underwent layoffs and restructuring. This article provides an in-depth analysis of the incident's impact, attack methods, and defense strategies from a corporate security perspective.
Apple releases Beats firmware update to fix unauthorized microphone access vulnerability; U.S. Department of Transportation concludes investigation into Delta Air Lines' service disruption caused by CrowdStrike incident; AWS launches AI-driven vulnerability management tool Continuum. Meanwhile, the Popa botnet is linked to an Israeli company, and Google Cloud Config Connector has an unpatched privilege escalation vulnerability.
South Korea's Personal Information Protection Commission has imposed a $400 million fine on e-commerce giant Coupang for a security breach that resulted in the leak of data from over 30 million customers. This penalty highlights severe deficiencies in access control and key management, serving as a wake-up call for global enterprise data governance.
The UK National Cyber Security Centre (NCSC) emphasized at Infosecurity Europe that, in the face of geopolitical uncertainty, AI-driven technological change, and an increasingly complex enterprise IT environment, organizations cannot wait for “clearer signals” before acting; they should immediately strengthen cyber resilience, identity security, and incident response readiness.
SecurityWeek has made all sessions of its Threat Detection & Incident Response Summit available on demand, with topics focused on alert fatigue, AI-driven detection, identity protection, cloud visibility, and incident response. For enterprises, this is not just an industry event; it also reflects how security operations are shifting from “single-point tools” to an “intelligent, interconnected, and verifiable response system.”