Ryan Naraine

The tool, called FBot, is capable of credential harvesting for spamming attacks, and AWS, PayPal and SaaS account hijacking.

Ivanti confirms active zero-day exploits, ships pre-patch mitigations, but says comprehensive fixes won't be available until January 22.

Patch Tuesday: Redmond patches critical, remote code execution vulnerabilities haunting Windows Kerberos and Windows Hyper-V.

Delinea acquires Israeli startup Authomize to add identity threat detection and response (IDTR) technologies to its product portfolio.

Patch Tuesday: Adobe patches six security flaws in the Substance 3D Stager product and warned of code execution risks on Windows and macOS.

Elevate Security raised $18.3 million in venture capital financing and scored investments from the likes of Cisco and CrowdStrike.

Late-stage player in the CNAPP space secures a $60 million extended Series E funding round at a valuation north of $1 billion.

SentinelOne plans to acquire PingSafe in a cash-and-stock deal that adds cloud native application protection platform (CNAPP) technologies.

SonicWall announces the acquisition of Banyan Security, a deal that adds zero-trust network access tooling to its product portfolio.

Isovalent raised about 70 million in funding from prominent investors including Microsoft's venture fund, Google, and Andreessen Horowitz.

The new round of financing was led by L2 Point Management and brings the total raised by Boston-based SimSpace to $70 million.

The US government announced the disruption of the notorious BlackCat ransomware-as-a-service operation and released a decryption tool to help organizations recover hijacked data.

VF Corporation (NYSE: VFC), which owns and operates some of the biggest apparel and footwear brands, has been hit by a ransomware attack that...

MongoDB CISO Lena Smart said the company was not aware of any exposure to the data that customers store in the MongoDB Atlas product. 

Malware hunters have set eyes on an impossible to kill botnet packed with end-of-life SOHO routers and linked it to a Chinese APT targeting...

Microsoft warns of critical spoofing and remote code execution bugs in the Windows MSHTML Platform and Microsoft Power Platform Connector.

Adobe warned users on both Windows and macOS systems about exposure to code execution, memory leaks and denial-of-service security issues.

New iMessage Contact Key Verification feature in Apple's iOS and macOS platforms help catch impersonators on its iMessage service.

Cupertino’s flagship mobile OS vulnerable to arbitrary code execution and data exposure security vulnerabilities.

San Francisco startup gets fresh capital from Battery Ventures to compete in the crowded identity and access management space.