The US Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the National Cyber Security Centres in New Zealand (NZ NCSC) and the United Kingdom (NCSC-UK) have issued joint guidance on the proper configuration and monitoring of PowerShell to eliminate the risk of abuse.
Top Cryptographers Flag ‘Devastating’ Flaws in MEGA Cloud Storage
Cryptographers at Swiss university ETH Zurich have found at least five exploitable security flaws in the privacy-themed MEGA cloud storage service and warned that the issues could lead to “devastating attacks on the confidentiality and integrity of user data in the MEGA cloud.”
Aqua Security Ships Open-Source Tool for Auditing Software Supply Chain
Cloud security startup Aqua Security has partnered with the Center for Internet Security (CIS) to create guidelines for software supply chain security and followed up by shipping an open-source auditing tool to ensure compliance with the new benchmark.
Cyberint Scores $40 Million Late-Stage Investment
Volexity Blames ‘DriftingCloud’ APT For Sophos Firewall Zero-Day
Big-game malware hunters at Volexity are shining the spotlight on a sophisticated Chinese APT caught recently exploiting a Sophos firewall zero-day to plant backdoors and launch man-in-the-middle attacks.
RSA Conference 2022 – Announcements Summary (Day 3)

Hundreds of companies are showcasing their products and services this week at the 2022 edition of the RSA Conference in San Francisco.
RSA Conference 2022 – Announcements Summary (Day 2)

Hundreds of companies are showcasing their products and services this week at the 2022 edition of the RSA Conference in San Francisco.
IBM to Acquire Randori for Attack Surface Management Tech
Technology giant IBM has announced plans to acquire early-stage attack surface management startup Randori in a deal that signals a major expansion of Big Blue’s cybersecurity ambitions.
RSA Conference 2022 – Announcements Summary (Day 1)

Hundreds of companies are showcasing their products and services this week at the 2022 edition of the RSA Conference in San Francisco.
Chainguard Bags Massive $50M Series A for Supply Chain Security
Venture capital powerhouse Sequoia is leading a massive $50 million early-stage investment in Chainguard, a startup created by a team of ex-Google software engineers to “make software supply chain secure by default.”











