ReFirm built its firmware analysis technology on Binwalk open source software, the international standard for extracting firmware images used by more than 50,000 global organizations.

AT&T Cyber hunts government threats; Netflix and VMware talk security lessons learned; and Palo Alto Networks zeroes in on zero trust.

Also at the RSA Conference, the security vendor published new attack surface data that found global enterprises expose a new, serious security vulnerability every 12 hours.

The timing of the acquisition is notable because the RSA security conference starts on Monday, and Cisco CEO Chuck Robbins will deliver a day 1 keynote.

Microsoft VP charts zero-trust Course; VMware names a new CEO; and Salt shifts API security posture left.

“One of the most important first steps in a zero-trust journey is to establish strong authentication,” Microsoft's Vasu Jakkal said.

The move comes as API vulnerabilities such as those that led to the Experion and Peloton data leaks highlight the need to identify flaws and secure APIs before they

Also this week, the U.S. Department of Energy launched a coordinated effort with CISA to secure the energy sector against cyberattacks.

Cisco joins South Korea's digital push; FBI hacks computers to kill Exchange web shells; and Vodaphone Germany activates Europe's first 5G standalone network.

Also on Tuesday, the NSA alerted Microsoft to more critical vulnerabilities that hackers could use to remotely compromise Exchange email systems.

McAfee sold its enterprise business for $4 billion; VMware joined the cloud-native app security frenzy; and Orca scored a whale of a Series C.

The Series D follows three years of growth for the company, which has seen a five-fold increase in customers and 800% revenue growth during that time.

The Carbon Black Cloud tooling update aims to "bridge the gap between the SOC team and DevOps team,” VMware Carbon Black's Shemer Schwarz explained.

FortiCWP Container Guardian secures container registries from vulnerabilities and scans for misconfigurations to protect Kubernetes workloads.

Palo Alto Networks SASE-fied Comcast SDN; Nokia hastened its shift to cloud; and SolarWinds' CEO claimed software will block breaches.

A software vulnerability led to the SolarWinds supply chain attack, and according to CEO Sudhakar Ramakrishna, software is also part of the solution to prevent a future breach.

The security services work across multiple clouds, and they use automation to prioritize risks, respond to threats, and connect that data with on-premises security operations.

“Understanding how the offense works is the best defense,” said John Hammond, a senior security researcher at Huntress.

Intel has signed on to DARPA's SAHARA and DPRIVE projects to develop custom ASICs for the U.S. government.

The highest ransom paid by an organization to a cybercriminal gang doubled from $5 million in 2019 to $10 million in 2020, while the average ransom paid skyrocketed 171%.

A survey conducted by Ponemon Institute found 73% of respondents wanted more transparency from their technology partners.

CrowdStrike paid $400 million for Humio; Palo Alto Networks dropped $158 million for Bridgecrew; and HPE acquired CloudPhysics.

The next decade will be significantly riskier when it comes to supply chain security, Intel's Jackie Sturm said.

At least 10 different advanced persistent threat groups in addition to China-linked Hafnium have been actively exploiting the recent Microsoft Exchange security flaws.