Application Security
Boston, Mass.-based Tidelift, a company on a mission to address open source supply chain “health and security,” has raised $27 million in Series C...
Hi, what are you looking for?
SecurityWeek
Endpoint Security
A backdoor feature found in hundreds of Gigabyte motherboard models can pose a significant supply chain risk to organizations.
Nation-State
Proofpoint warns that APT actors linked to Russia, Iran and North Korea are increasingly targeting small- and medium-sized businesses.
Application Security
Red Hat rolls out a new suite of tools and services to help mitigate vulnerabilities across every stage of the modern software supply chain.
Supply Chain Security
China’s government told users of computer equipment deemed sensitive to stop buying products from the biggest U.S. memory chipmaker, Micron.
Supply Chain Security
Security researchers are warning that newly patched vulnerabilities in the Pimcore platform bring code execution risks.
Funding/M&A
Manifest raises $6 million in seed funding to help businesses generate, collect, and manage software bill of materials (SBOMs).
Application Security
WhiteSource Changes Company Name to Mend
Malware & Threats
A popular Python package was compromised recently and replaced with a malicious version apparently designed to help the attacker obtain AWS credentials.
Supply Chain Security
Security researchers at SentinelLabs are calling attention to a software chain supply attack targeting Rust developers with malware aimed directly at infecting GitLab Continuous...
ICS/OT
MITRE has announced a new special interest group (SIG) whose goal is to help enhance cyber defenses for industrial control systems (ICS) and operational...
Cyberwarfare
The United States and the European Union announced on Monday a joint effort to boost microchip manufacturing and tackle Russian disinformation around the war...
Cybersecurity Funding
Palo Alto, Calif-based firm Xage has raised a $6 million top-up to the $30 million Series B funding it secured in January 2022.
CISO Strategy
We have a long way to go to get adequate cybersecurity expertise on boards, but the time has come to make it happen
Cybercrime
Agricultural equipment giant AGCO says its business operations have been impacted after falling victim to a ransomware attack last week.AGCO designs, makes, and distributes...
Application Security
Code hosting platform GitHub on Wednesday said it would make it mandatory for software developers to use at least one form of two-factor authentication (2FA) by...
Supply Chain Security
As the world increasingly moves to the cloud and digital-everything, organizations’ risk postures have also changed. Embedding security into the business is the new,...
Vulnerabilities
A zero-day vulnerability in Progress Software’s MOVEit Transfer product has been exploited to hack organizations and steal their data.
Mobile & Wireless
Mobile & Wireless
Artificial Intelligence
Shift5 founder Josh Lospinoso discusses AI and how software vulnerabilities in weapons systems are a major threat to the U.S. military.
Artificial Intelligence
