Socket has raised $40 million in a Series B funding round to work on open source software supply chain security technology.
The post Socket Raises $40 Million for Supply Chain Security Tech appeared first on SecurityWeek.
Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large
Identity security is front, and center given all the recent breaches that include Microsoft, Okta, Cloudflare and Snowflake to name a few. Organizations are starting to realize that a shake-up is needed in terms of the way we approach identity security both from a strategic but also a technology vantage point.
Identity security is more than just provisioning access
The conventional view
Identity security is more than just provisioning access
The conventional view
CISA, DOJ Propose Rules for Protecting Personal Data Against Foreign Adversaries
CISA and the DOJ are seeking comment on rules whose goal is to protect the personal data of Americans against foreign adversaries.
The post CISA, DOJ Propose Rules for Protecting Personal Data Against Foreign Adversaries appeared first on SecurityWeek.
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities (KEV) catalog by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday, citing evidence of active exploitation.
The vulnerability, tracked as CVE-2024-38094 (CVSS score: 7.2), has been described as a deserialization vulnerability impacting SharePoint that could result
The vulnerability, tracked as CVE-2024-38094 (CVSS score: 7.2), has been described as a deserialization vulnerability impacting SharePoint that could result
SIGA Launches OT Cybersecurity Suite for CISOs
SIGA has launched SigaML2, a solution described as a multi-layer machine learning process-oriented OT cybersecurity suite.
The post SIGA Launches OT Cybersecurity Suite for CISOs appeared first on SecurityWeek.
NotLockBit Ransomware Can Target macOS Devices
A file-encrypting malware family posing as the LockBit ransomware has been observed targeting macOS systems.
The post NotLockBit Ransomware Can Target macOS Devices appeared first on SecurityWeek.
IBM Boosts Guardium Platform to Address Shadow AI, Quantum Cryptography
IBM is updating and upgrading its Guardium platform to provide security for the two primary new technology problems: AI models and quantum safety.
The post IBM Boosts Guardium Platform to Address Shadow AI, Quantum Cryptography appeared first on SecurityWeek.
CISA Warns Recent Microsoft SharePoint RCE Flaw Exploited in Attacks
CISA has added a recent Microsoft SharePoint Server remote code execution vulnerability to the KEV catalog.
The post CISA Warns Recent Microsoft SharePoint RCE Flaw Exploited in Attacks appeared first on SecurityWeek.
Researchers Reveal ‘Deceptive Delight’ Method to Jailbreak AI Models
Cybersecurity researchers have shed light on a new adversarial technique that could be used to jailbreak large language models (LLMs) during the course of an interactive conversation by sneaking in an undesirable instruction between benign ones.
The approach has been codenamed Deceptive Delight by Palo Alto Networks Unit 42, which described it as both simple and effective, achieving an average
The approach has been codenamed Deceptive Delight by Palo Alto Networks Unit 42, which described it as both simple and effective, achieving an average
Think You’re Secure? 49% of Enterprises Underestimate SaaS Risks
It may come as a surprise to learn that 34% of security practitioners are in the dark about how many SaaS applications are deployed in their organizations. And it’s no wonder—the recent AppOmni 2024 State of SaaS Security Report reveals that only 15% of organizations centralize SaaS security within their cybersecurity teams. These statistics not only highlight a critical security blind spot,