Ryan Naraine

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

In response to a spate of embarrassing hacks, Redmond pushes ‘Secure Future Initiative’ promising faster cloud patches, better management of identity signing keys and...

Silicon Valley startup snags $20 million in new capital and announced plans to expand beyond traditional IT environments.

The CVSS vulnerability scoring standard is refreshed to provide more data and remove ambiguities in rating the severity of downstream issues.

Washington startup Chainguard banks $61 million in new financing as investors make hefty wagers on software supply chain security companies.

Proofpoint removes a formidable competitor from the crowded email security market and adds technology to address risk from misdirected emails.

Apple patches dozens of serious security flaws in its macOS and iOS platforms, warning that hackers could launch code execution exploits.

Mandiant's Chief analyst urges critical infrastructure defenders to work on finding and removing traces of Volt Typhoon, a Chinese government-backed hacking team caught in...

Michigan startup raises $75 million in new funding as venture capital investors bet big on attack surface management technologies.

VMware described the bug as an out-of-bounds write issue in its implementation of the DCE/RPC protocol. CVSS severity score of 9.8/10.

Adlumin, a startup working on technology to boost security for mid-market firms, has banked $70 million in new funding led by SYN Ventures.

Since 2020, Island has raised a total of $325 million to help protect corporate data flowing through SaaS and internal web applications.

Okta warns that hackers broke into its support case management system and stole sensitive data that can be used to impersonate valid users.

British startup is working on software to mitigate against the ‘wild west’ of unregulated AI apps harvesting company data at scale.

Google says it is still catching government-backed groups linked to China and Russia launching WinRAR exploits in targeted attacks.

Since launching in 2021, Darwinium has raised $26 million to build a bot and fraud prevention platform running on the perimeter edge.

Startup with roots in the ecommerce mobile payments space raises $40 million for digital identity verification and authentication technology.

Privacy-focused messaging firm Signal is pouring cold water on widespread rumors of a zero-day exploit in its popular encrypted chat app.

Flaw poses a direct threat to the SOCKS5 proxy handshake process in cURL and can be exploited remotely in some non-standard configurations.

Microsoft says an APT group tracked as Storm-0062 has been hacking Confluence installations since mid-September, three weeks before Atlassian’s disclosure.