Cloud Security
Maryland startup scores $8.5 million in seed-stage funding to compete in the Identity Threat Detection and Response (ITDR) category.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Researchers show how context manipulation can cause agentic browsers to abandon safety guardrails and exfiltrate sensitive credentials.
Funding/M&A
Israel-based Entro specializes in non-human identity and credential security solutions, and it will enable SailPoint to enhance its products.
Identity & Access
Attendees will learn how attackers evade conventional detection methods, why legacy MFA alone is no longer sufficient, and how organizations can strengthen their defenses.
Cybersecurity Funding
The startup has built a security-first identity platform to protect humans, machines, and AI agents.
Identity & Access
Okta says some of its US-based customers have been targeted in social engineering attacks whose goal was to disable MFA and obtain high privileges.
Endpoint Security
NEWS ANALYSIS: Redmond plants its feet firmly in the enterprise browser space, sending major ripples through Silicon Valley's bustling venture-backed startup ecosystem.
Funding/M&A
The private equity firm merges the newly acquired ForgeRock with Ping Identity, combining two of the biggest names in enterprise IAM market.
Cloud Security
Israeli startup Grip Security has banked $41 million in new financing from a group of investors led by Third Point Ventures.
Cybersecurity Funding
Cerby has raised $17 million in Series A funding for its access management platform for applications not supported by identity providers.
Identity & Access
CISA has published a cyber defense plan outlining strategies to help critical infrastructure organizations reduce the risks associated with RMM software.
Identity & Access
Google has released the first quantum-resilient FIDO2 security key implementation as part of its OpenSK project.
Cybercrime
Identity-based attacks have soared in the past year, according to CrowdStrike’s 2023 Threat Hunting Report.
Identity & Access
SpecterOps announces version 5.0 of BloodHound Active Directory mapping tool with enterprise-grade deployment, usability, and UI.
Identity & Access
Proton makes its open source Proton Pass password manager globally available for major browsers and mobile devices.
Funding/M&A
New York startup scores early stage financing to build new technology to replace virtual desktop infrastructure.
Cybersecurity Funding
Astrix Security raises $25 million in Series A funding for its solution designed to help enterprises secure non-human identities.
Funding/M&A
Identity verification solutions provider Socure has acquired automated ID verification firm Berbix for roughly $70 million in cash and stock.
Government
CISA’s Binding Operational Directive 23-02 requires federal agencies to secure the network management interfaces of certain classes of devices.
Government
US and Israeli government agencies have published new guidance on preventing malicious exploitation of remote access software.
Identity & Access
Google Workspace now offers support for passwordless authentication using passkeys, in beta.
Identity & Access
PyPI will require all accounts that maintain a project to enable two-factor authentication (2FA) by the end of 2023.
ICS/OT
Secure remote access is essential for industrial organizations, but many are concerned about the associated risks, a new study shows.
Identity & Access
Google has added passkeys support to Google accounts on all major platforms as part of the company’s passwordless sign-in efforts.
Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.
RegisterThis year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.
RegisterExpert Insights
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.
(Matias Madou)
From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype.
(Joshua Goldfarb)
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
(Danelle Au)
From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI.
(Etay Maor)
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.
(Torsten George)