Cybersecurity Funding
Clutch Security has raised $20 million in a Series A funding round led by SignalFire to secure non-human identities.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
Artificial Intelligence
Security teams must treat autonomous agents as highly privileged identities.
Funding/M&A
Seraphic Security banks $29 million investment as VCs remain bullish on startups with security-themed browsers for corporate defenders.
Identity & Access
Threat actors have been exploiting SimpleHelp remote access software shortly after the disclosure of three vulnerabilities.
Identity & Access
Both human and machine identities occupy a unique position: they are simultaneously the foundation of cybersecurity and its weakest link.
Artificial Intelligence
New York identity management startup raises $36 million in an unusually large seed round co-led by Team8 and Intel Capital.
Identity & Access
Oasis Security has disclosed AuthQuake, a method for bypassing Microsoft MFA within an hour without user interaction.
Funding/M&A
Tel Aviv company building software to secure non-human identities banks a $45 million funding round led by Menlo Ventures.
Identity & Access
Microsoft has rolled out new default security protections that mitigate NTLM relaying attacks across on-premises Exchange, AD CS, and LDAP services.
Cloud Security
Starting this month, Google Cloud will be rolling out mandatory MFA for all users who sign in with a password.
Identity & Access
FIDO Alliance has published new specifications for securely moving passkeys across providers, as Amazon announced 175 million passkey users.
Identity & Access
Multi-factor authentication is a necessary safeguard, but its limitations show why organizations can't rely on it alone to prevent breaches.
Cloud Security
Credentials are still the most common entry point for bad actors, even as businesses deploy multi-factor authentication (MFA) to strengthen defenses.
Artificial Intelligence
That dream of a decentralized privacy-retaining identity system able to combat AI-driven bots and deepfakes may not be as elusive as feared – courtesy...
Identity & Access
Five Eyes cybersecurity agencies have released joint guidance on identifying Active Directory compromises.
Identity & Access
Users can now save passkeys to Google Password Manager on computers running Windows, macOS, and Linux, in addition to Android devices.
Cybersecurity Funding
Hydden has raised $4.4 million in seed funding for a solution designed to provide deep visibility into identities, accounts and privileges.
Cybersecurity Funding
Aembit has raised $25 million in Series A funding to protect non-human identities and minimize attack surface.
Identity & Access
YubiKey security keys can be cloned via a side-channel attack that leverages a vulnerability in a cryptographic library.
Identity & Access
GitHub patches a trio of security defects in the GitHub Enterprise Server product and recommends urgent patching for corporate users.
Cloud Security
Microsoft is implementing automatic enforcement of multi-factor authentication (MFA) for all Azure users starting October.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)