While employees want to do the right thing when it comes to protecting their organization from cyber threats, we cannot expect them to be perfect
Bridging the Gap Between Training and Behavior
Purple Teaming Security Management Firm PlexTrac Raises $70 Million
Boise, Idaho-based PlexTrac has raised $70 million in a Series B funding round led by Insight Partners with participation from existing investors Madrona Venture Group, Noro-Moseley Partners and StageDotO Ventures.
The Third Building Block for the SOC of the Future: Balanced Automation
When automation is balanced between humans and machines, we can ensure teams always have the best tool for the job
Attack Surface Management Play Censys Scores $35M Investment
The jostling for space in the attack surface management space intensified this week with Michigan startup Censys banking a new $35 million funding round to fuel growth and expansion.
White House Publishes Federal Zero Trust Strategy
UK’s NCSC Pushes NMAP Scanner Scripts to Fill Defender Gap
The U.K. government’s cybersecurity agency has announced plans to ship a collection of well-tested, reliable scanning scripts to help defenders find and fix high-priority software security vulnerabilities.
Prolific Chinese APT Caught Using ‘MoonBounce’ UEFI Firmware Implant
Threat hunters at Kaspersky have spotted a well-known Chinese APT actor using an UEFI implant to maintain stealthy persistence across reboots, disk formatting or disk replacements.
Details Published on AWS Flaws Leading to Data Leaks
Researchers at cloud security startup Orca Security have publicly documented a pair of vulnerabilities in AWS CloudFormation and AWS Glue that attackers could use to leak sensitive files or access other customers’ data.
Meshed Cybersecurity Platforms Enable Complex Business Environments
Cybercriminals are exploiting the confusion that results from organizations simply throwing money at their cybersecurity challenges
FCC Chair Proposes New Policies for Carrier Data Breach Reporting
Federal Communications Commission (FCC) chairwoman Jessica Rosenworcel this week proposed updated policies around telecom providers’ reporting of data breaches.
