Kubernetes Container Isolation Startup Edera Raises $5 Million

September 20, 2024 at 08:03AM Startup Edera raised $5M in seed funding led by 645 Ventures and Eniac Ventures, with additional support from FPV Ventures, Generationship, Precursor Ventures, Rosecliff Ventures, and angel investors. The Seattle-based company provides secure isolation solutions for Kubernetes and AI workloads, aiming to prevent known and unknown vulnerabilities while expanding its … Read more

Realm.Security Emerges From Stealth With $5 Million in Seed Funding

September 12, 2024 at 10:54AM Realm.Security, a Boston-based company, recently came out of stealth mode with $5 million in seed funding. Founded by cybersecurity experts, the company aims to efficiently manage security data using AI and data processing technology. Their platform is designed to integrate with various cybersecurity products and address the increasing challenge of … Read more

Cyber Staffing Shortages Remain CISOs’ Biggest Challenge

September 10, 2024 at 03:17PM SecOps leaders face major challenges navigating the skills gap in cybersecurity and using commonly used tools. Command Zero’s report highlights the shortage of qualified cyber investigators, leading to overworked teams and increased threats. Additionally, the report discusses challenges posed by EDR/XDR, SIEM, and SOAR tools. It also emphasizes the need … Read more

The AI Convention: Lofty Goals, Legal Loopholes, and National Security Caveats

September 10, 2024 at 08:15AM The AI Convention, signed on September 5, 2024, aims to protect human rights, democracy, and the rule of law in the face of artificial intelligence advancements. However, concerns have been raised about its enforceability, particularly regarding national security interests and treatment of public vs private sectors. Challenges in balancing human … Read more

Webinar: Learn to Boost Cybersecurity with AI-Powered Vulnerability Management

September 2, 2024 at 05:12AM The cybersecurity landscape is ever-changing, with new vulnerabilities and sophisticated attackers. Artificial Intelligence (AI) is set to revolutionize vulnerability management by enabling the identification of risks at scale, prioritizing threats, and automating tasks for faster remediation. A webinar will explore how AI empowers security teams and fosters a proactive security … Read more

Check Point, Cisco Boost AI Investments with Latest Deals

August 30, 2024 at 07:39AM Cybersecurity giants Check Point Software and Cisco are continuing their investments in AI, with recent acquisitions of startups Cyberint and Robust Intelligence. Both companies aim to strengthen their AI capabilities for threat detection and risk management. Check Point seeks to expand its security operations center with Cyberint’s expertise, while Cisco … Read more

SANS Institute Unveils Critical Infrastructure Strategy Guide for 2024: A Call to Action for Securing ICS/OT Environments

August 30, 2024 at 02:42AM The SANS Institute has released a guide, “ICS Is the Business,” by Dean Parsons. It addresses the increasing need for ICS security in the face of a 50% rise in ransomware attacks in 2023. The guide emphasizes the critical steps organizations must take to safeguard their operations and ensure public … Read more

SANS Institute Unveils Critical Infrastructure Strategy Guide for 2024

August 29, 2024 at 04:49PM The SANS Institute has released a critical strategy guide, “ICS Is the Business,” in response to a 50% increase in ransomware attacks on ICS in 2023. Authored by Dean Parsons, the guide emphasizes the growing threat landscape, the impact of high-frequency attacks, ICS cybersecurity controls, and the role of AI, … Read more

News Desk 2024: Hacking Microsoft Copilot Is Scary Easy

August 29, 2024 at 08:16AM Microsoft Copilot is gaining popularity as an artificial intelligence productivity assistant for large enterprises. However, Zenity’s CTO Michael Bargury warns about cybersecurity risks due to Copilot’s deep access into enterprise systems, making it vulnerable to malicious attacks. Bargury demonstrated how a single email can take over Copilot, despite acknowledging its … Read more

Microsoft Fixes ASCII Smuggling Flaw That Enabled Data Theft from Microsoft 365 Copilot

August 27, 2024 at 02:27AM A now-patched vulnerability in Microsoft 365 Copilot allowed for theft of sensitive user information using ASCII smuggling. Attack methods included prompting injection, data exfiltration via hidden links, and exploiting AI tools. Microsoft addressed the issue after responsible disclosure in January 2024, yet risks in AI tools persist, emphasizing the need … Read more