A cybersecurity startup is warning of a major, unattended weak link in the software supply chain: the vexing problem of valuable corporate secrets — API keys, usernames and passwords, and security certificates — publicly exposed in corporate repositories.
Italy Investigates Russia’s Kaspersky Antivirus Software
Italy’s data privacy watchdog said Friday it was investigating the “potential risks” that Russian antivirus software Kaspersky could be used to launch cyberattacks.
High-Severity Vulnerabilities Patched in BIND Server
The Internet Systems Consortium (ISC) has released security updates to fix multiple high-severity vulnerabilities in the widely deployed Berkeley Internet Name Domain (BIND) server software.
Software Supply Chain Weakness: Snyk Warns of ‘Deliberate Sabotage’ of NPM Ecosystem
Software supply chain security fears escalated again this week with the discovery of what’s being described as “deliberate sabotage” of code in the open-source npm package manager ecosystem.
SentinelOne to Acquire Attivo Networks for $616M
Enterprise cybersecurity powerhouse SentinelOne on Tuesday announced plans to spend $616 million to acquire Attivo Networks, a Silicon Valley startup that sells breach detection technology.
HD Moore’s Rumble Raises $15M Series A Investment
Less than a year after emerging from stealth $5 million in seed funding, HD Moore’s Rumble asset management startup is attracting heavy interest from venture capital investors.
Italy Fines US Facial Recognition Firm
Italy’s data privacy watchdog on Wednesday fined US-based firm Clearview AI 20 million euros (almost $22 million) over its controversial facial recognition software.
Adobe Patches ‘Critical’ Security Flaws in Illustrator, After Effects
Software maker Adobe on Tuesday shipped urgent security updates to fix code execution vulnerabilities in the widely deployed Illustrator and After Effects products.
Infusion Pumps Impacted by Years-Old Critical Vulnerabilities: Report
More than 100,000 infusion pumps were found susceptible to severe vulnerabilities that were disclosed roughly three years ago, according to researcher at Palo Alto Networks’ Unit 42.
BastionZero Raises $6M Seed for Secure Remote Access Tech
BastionZero, a provider of remote access to backend infrastructure, has raised $6 million in seed investment.
The funding round was led by Dell Technologies Capital, with added investments from participation from Akamai and DG Lab Fund (Japan).












