A cybersecurity startup is warning of a major, unattended weak link in the software supply chain: the vexing problem of valuable corporate secrets — API keys, usernames and passwords, and security certificates — publicly exposed in corporate repositories.
‘Serpent’ Backdoor Used in Malware Attacks on French Entities
French organizations in the construction, government, and real estate sectors have been targeted with a new backdoor in a string of malware attacks, according to a warning from Proofpoint.
SSE Company Skyhigh Security Emerges From McAfee Enterprise
Private equity giant Symphony Technology Group (STG) on Tuesday announced the launch of a new security service edge (SSE) company named Skyhigh Security.
High-Severity Vulnerabilities Patched in BIND Server
The Internet Systems Consortium (ISC) has released security updates to fix multiple high-severity vulnerabilities in the widely deployed Berkeley Internet Name Domain (BIND) server software.
Todyl Banks $28M Series A Investment
Security and networking platform start-up Todyl on Thursday announced the closing of a $28 million Series A funding round.
The new investment round was led by Anthos Capital with participation from previous investors Blu Ventures, StoneMill Ventures, and Tech Operators.
Software Supply Chain Weakness: Snyk Warns of ‘Deliberate Sabotage’ of NPM Ecosystem
Software supply chain security fears escalated again this week with the discovery of what’s being described as “deliberate sabotage” of code in the open-source npm package manager ecosystem.
SentinelOne to Acquire Attivo Networks for $616M
Enterprise cybersecurity powerhouse SentinelOne on Tuesday announced plans to spend $616 million to acquire Attivo Networks, a Silicon Valley startup that sells breach detection technology.
Thousands of Secret Keys Found in Leaked Samsung Source Code
An analysis of the recently leaked Samsung source code revealed that thousands of secret keys have been exposed, including many that could be highly useful to malicious actors.
HD Moore’s Rumble Raises $15M Series A Investment
Less than a year after emerging from stealth $5 million in seed funding, HD Moore’s Rumble asset management startup is attracting heavy interest from venture capital investors.
Over 500,000 Patients Hit by Data Breaches at Healthcare Firms in Alabama, Colorado
The information of more than half a million individuals was likely compromised after three healthcare services providers in Alabama and Colorado suffered cybersecurity breaches.












