Ryan Naraine

Adobe Patch Tuesday headlined by a major Adobe ColdFusion update patching a wide swatch of code execution and privilege escalation attacks.

Patch Tuesday: Microsoft patches at least 70 security bugs and flagged five zero-days in the “exploitation detected” category.

Orca positioned the deal as an expansion of its capabilities into the realm of AI-based autonomous remediation and prevention. 

Apple rolls out iOS and macOS platform updates to fix serious security bugs that could be triggered simply by opening an image or video...

By baking minimum expectations into procurement conversations, the plan is to steer software vendors to “secure-by-design and default” basics.

The proposed $491 million cut is being positioned as a “refocusing”of CISA on its core mission “while eliminating weaponization and waste.”

The OpenEoX model proposes a shared data format that can be integrated into SBOMs, security advisories, and other ecosystem tools. 

This tension between hard-edged risk realism and breathless AI evangelism sets an unmistakable tone for a bellwether conference where 40,000-plus gather to do business. 

The latest Verizon DBIR landed this week with a startling statistic about the security posture of VPNs and network edge devices.

The cash infusion brings Chainguard’s total funding to about $612 million since launching in 2021 and prices the company at $3.5 billion.

Sentra has now raised north of $100 million for controls technology to keep sensitive data out of misconfigured AI workflows.

Microsoft security chief Charlie Bell says the SFI's 28 objectives are “near completion” and that 11 others have made “significant progress.”

North Korean cryptocurrency thieves abusing Zoom Remote collaboration feature to target cryptocurrency traders with malware.

San Francisco startup closes a hefty $75 million Series A funding round led by Khosla Ventures and Mayfield.

Chris Krebs has resigned from SentinelOne after security clearance withdrawn and an order to review CISA’s conduct under his leadership.

The vulnerabilities are described as code execution and mitigation bypass issues that affect Apple’s iOS, iPadOS and macOS platforms.

The US government's cybersecurity agency CISA has “executed the option period on the contract” to keep the vulnerability catalog operational.

Shield Capital leads a $9 million seed-stage funding round for Israeli startup building technologies for AI security and privacy guardrails.

MITRE warns of a deterioration of national vulnerability databases and advisories, slowed vendor reaction and limited response operations.

San Francisco startup banks $30 million in Seed and Series A funding led by Lightspeed Venture Partners and Walden Catalyst Ventures.