Google’s GUAC Aims to Democratize Software Supply Chain Security Metadata
A new open source initiative Google announced this week could move the needle forward on industrywide efforts to address software supply chain security issues.The project is called GUAC, or...
FBI: Iranian Threat Group Likely to Target US Midterms
Although the Iranian threat group Emennet Pasargad is largely dedicated to launching attacks against Israeli officials, the FBI warns the group is likely to engage in hack-and-leak operations against...
Microsoft Data-Exposure Incident Highlights Risk of Cloud Storage Misconfiguration
Cloud storage misconfigurations of the sort that Microsoft disclosed late yesterday continue to be a major contributor to data breaches.
Microsoft Security Response Center said in a post that information...
9 Essential Infrastructure Security Considerations for Kubernetes
Part of the reason why securing Kubernetes can be challenging is that Kubernetes isn’t a single, simple framework. It’s a complex, multi-layered beast. Each layer — from code and...
Bolster Deepens Platform with Dark Web Threat Intelligence and 24/7 Support
Los Altos, CA- October 20, 2022 — Bolster, Inc., the automated digital risk protection company, today announced the addition of Dark Web Intelligence and 24/7 support. Bolster’s new Dark Web...
CyCognito Launches Next Generation of Exploit Intelligence Threat Remediation Platform
PALO ALTO, Calif., Oct. 20, 2022 /PRNewswire/ — CyCognito today announced the next generation of its Exploit Intelligence solution to help security teams prioritize and mitigate the most critical...
Ethereum Alarm Clock exploit leads to $260K in stolen gas fees so far
A bug in the smart contract code for the Ethereum Alarm Clock service has reportedly been exploited, with nearly $260,000 said to have been swiped from the protocol so...
China-Linked Cyber-Espionage Team Homes In on Hong Kong Government Orgs
The Winnti cyber-espionage group out of China was discovered deploying the Spyder Loader malware as part of an ongoing campaign to gather intelligence information on government organizations in Hong...
Apache Commons Vulnerability: Patch but Don’t Panic
Researchers who have analyzed the recently disclosed vulnerability in Apache Commons Text — referred to by some as Text4Shell — described it this week as serious but unlikely to be as...
Supply chain attacks increased over 600% this year and companies are falling behind
The number of documented supply chain attacks involving malicious third-party components has increased 633% over the past year, now sitting at over 88,000 known instances, according to a new...
