“The stark reality of the cybersecurity industry is the offense-defense imbalance," Perception Point CTO Tal Zamir said.

Cynet finds smaller security teams face greater risks; Oracle targets EU cloud regions; and Microsoft, Cosmo Tech's digital twins collab.

"Log4j is an ‘endemic vulnerability’ and vulnerable instances of Log4j will remain in systems for many years to come," the Cyber Safety Review Board noted.

A rise in the use of ransomware-as-a-service has contributed to what Tanium says is the largest attack surface in history.

“We are not going after all the verticals and that's how we differentiate from the other vendors," noted Nokia's Rodrigo Brito.

CSW reported new ransomware vulnerabilities; Microsoft, Accenture collaborate on sustainability; and AWS ruled the public cloud market again.

The Open Source Security Foundation and the Linux Foundation released an action plan to improve open source software's security and resilience.

Red Hat wants to build security into continuous integration/continuous delivery pipelines that customers are using to manage their applications.

“Web application and API attacks and zero-day vulnerabilities have been on an absolute tear over the last 9 months,” Akamai's Thomas Emmons noted.

Cisco's new Predictive Networks aims at improving user experience; API traffic creates vulnerabilities; and Arista posted record Q1 results.

Eight out of 15 top vulnerabilities routinely exploited last year by malicious actors impacted Microsoft Exchange email servers.

Microsoft explains its data center efficiency; Bell Canada boosts its 5G edge; and Forrester predicts cloud security improvements.

While there were indications of a slowed pace in the second half of 2021, zero-day exploitation is still expanding at an elevated rate, Mandiant found.

The deal merges next-generation firewall capabilities with public cloud scalability and management

Google Cloud's CISO wants to talk about your digital immune system; Ericsson struggles with its history of criminal activity; and Arm appointed Rene Haas as CEO.

“Protecting the runtime is the foundation of securing the inner workings of a modern application,” VMware's Tom Gillis said.

In addition to Google Cloud and early Azure support, Lacework also unveiled a new name for its core cloud security platform: Polygraph Data Platform.

Vodafone opened a facility to develop silicon for open RAN; Microsoft and Google invested in the Alpha-Omega Project; and SDxCentral's top articles from January.

The Alpha-Omega Project will look for new, undiscovered vulnerabilities in open source code and then work with project maintainers to fix them.

Plus, a bug in the Linux kernel, discovered earlier this month, leaves Kubernetes clusters and other containerized workloads open to attack.

The summit follows a series of cyberattacks including one targeting Apache’s popular Java logging library that’s used in nearly every enterprise app and cloud service.

“Operators need to verify that the patch they’ve got in hand is safe to install and did indeed come from their vendor,” aDolus CTO Eric Byres said.

Hackers are exploiting a Log4Shell vulnerability in VMware Horizon; CNCF reports adoption of serverless computing has surged among edge developers.

“Our investigation shows that successful intrusions in these campaigns led to the deployment of the Night Sky ransomware,” Microsoft noted.