Ryan Naraine

The most serious of the vulnerabilities may allow an attacker to read memory contents or launch denial-of-service exploits.

Comcast jumps into the enterprise cybersecurity business, betting that its internal security tools and inventions can find traction in an expanding marketplace.

VMware confirms the publication of exploit code and urged VMware vRealize Log Insight users to implement mitigations immediately.

Israeli venture group Team8 has bankrolled an $11 million seed-stage investment in Gem Security.

Nantucket’s public schools shut its doors to students and teachers after a data encryption and extortion attack on its computer systems.

Sentra, a cloud data security company with roots in New York and Tel Aviv, has raised a $30 million as investors continue to place...

Chainguard OpenVEX Spec adds clarity to Supply Chain Vulnerability warnings specifications to help software vendors and maintainers communicate precise metadata about the vulnerability status...

Identity and access governance vendor Saviynt has closed a $205 million financing round.

Tenable has launched a $25 million venture fund to place bets on early-stage startups in the exposure management space.

VMware vRealize Log Insight vulnerability allows an unauthenticated attacker to take full control of a target system.

GoTo said an unidentified threat actor stole encrypted backups and an encryption key for a portion of that data during a 2022 breach.

Apple rolled out iOS 16.3 and macOS Ventura 13.2 to cover serious security vulnerabilities.

Thoma Bravo will spend $1.3 billion to acquire Canadian software firm Magnet Forensics, expanding a push into the lucrative cybersecurity business.

T-Mobile disclosed another massive data breach affecting approximately 37 million customer accounts.

A new report finds that barely 1% of all SBOMs being generated today meets the “minimum elements” defined by the U.S. government.

CISA gave federal agencies a February deadline to patch a critical vulnerability in the CentOS Control Web Panel utility.

Researchers tracking a remote code execution vulnerability in Zoho’s ManageEngine products are warning organizations to brace for “spray and pray” attacks across the internet.

Electric car maker Tesla is using the annual Pwn2Own hacker contest to incentivize security researchers to showcase complex exploit chains that can lead to...

Hack The Box Raises $55 Million in Funding Round Led by Carlyle

Microsoft’s security patching machine hummed into overdrive Tuesday with the release of fixes for at least 97 documented software vulnerabilities, including a zero-day that’s...