Stealth Bomber: Atlassian Confluence Exploits Drop Web Shells In-Memory

March 8, 2024 at 11:56AM New proof-of-concept exploits are targeting the Atlassian Confluence Data Center and Confluence Server flaw, allowing attackers to execute code within Confluence’s memory without leaving a trace on the file system. Vulnerability CVE-2023-22527 has become a hub of malicious activity, with 30 unique in-the-wild exploits, including the use of the “infamous” … Read more

How to Prioritize Cybersecurity Spending: A Risk-Based Strategy for the Highest ROI

February 29, 2024 at 07:09AM Staying ahead in cybersecurity is crucial for IT leaders in protecting organizations. The text discusses the impact of data breaches, increasing cybersecurity spending, and maximizing cybersecurity resources. It highlights the importance of a risk-based approach, focusing on external attack surfaces, end user credentials, vulnerability remediation, and threat intelligence to optimize … Read more

Criminal IP ASM: A new cybersecurity listing on Microsoft Azure

February 6, 2024 at 10:11AM AI SPERA, a Microsoft ISV partner, announced the availability of Criminal IP ASM on the Microsoft Azure Marketplace. Criminal IP ASM is an Automated Attack Surface Management SaaS solution that utilizes IP-based security monitoring technology to quickly identify vulnerabilities and manage assets. It is ideal for companies requiring continuous threat … Read more

Criminal IP and Tenable Partner for Swift Vulnerability Detection

January 9, 2024 at 11:33AM Criminal IP, a Cyber Threat Intelligence search engine developed by AI SPERA, has partnered with Tenable for threat analysis and exposure management. It streamlines essential IP address data to Tenable’s platform, empowering users to proactively identify and mitigate potential threats. This collaboration provides a comprehensive solution for cybersecurity strategy and … Read more

Webinar – Leverage Zero Trust Security to Minimize Your Attack Surface

January 8, 2024 at 04:27AM Digital expansion increases the external attack surface, exposing organizations to cyberthreats. Traditional security tools such as firewalls and VPNs contribute to this vulnerability. External Attack Surface Management (EASM) is a growing priority, with zero trust security being a key solution to minimize the attack surface. Join the webinar with Zscaler … Read more

Okta to Acquire Israeli Startup Spera Security

December 20, 2023 at 11:39AM Okta has agreed to acquire Israeli startup Spera Security to bolster its Identity threat detection and security capabilities. The deal, valued at around $100-130 million, aims to provide customers with enhanced technology for identifying and addressing identity-driven attacks. Spera’s platform offers continuous protection from identity-based attacks through proactive monitoring and … Read more

Modern Attack Surface Management for CISOs

December 7, 2023 at 04:22AM Modern Attack Surface Management (ASM) is essential for CISOs as traditional methods can’t keep up with evolving digital threats and cloud-based environments. Modern ASM solutions should offer continuous, real-time discovery and contextual risk assessments across all environments. Trend Vision One™ provides comprehensive, automated ASM with total visibility, prioritization, and remediation … Read more

Modern Attack Surface Management for Cloud Teams

November 27, 2023 at 05:26AM The text discusses the importance of modern attack surface management (ASM) for cloud teams. It highlights the need for robust ASM solutions that provide real-time visibility, continuous risk assessment, and proactive risk mitigation. The text also emphasizes the value of a platform approach to consolidate security solutions and improve efficiency. … Read more

Cavelo Raises CA$5 Million for Attack Surface Management Platform

November 10, 2023 at 11:30AM Canadian cybersecurity startup Cavelo has secured CA$5 million in seed funding, bringing its total raised to CA$6.3 million. The funding round was led by Inovia Capital, with participation from Graphite Ventures and existing investors. Cavelo’s solution leverages machine learning to continuously scan an organization’s assets, identify sensitive data, and provide … Read more

Censys Banks $75M for Attack Surface Management Technology

October 25, 2023 at 11:15AM Michigan startup Censys has secured $75 million in funding, including a $50 million Series C venture round and $25 million in debt funding. The funding was led by SVB Capital and included investors such as Decibel Partners, GV, Greylock, and Intel Capital. Censys offers technology to help organizations automate security … Read more