Unlike Spectre or Meltdown, the side-channel attacks don't rely on previously disclosed exploits and are immune to the current crop of countermeasures.

Microsoft issued patches for older, unsupported versions of its Exchange Server email software in the wake of a major hack linked to China.

FireEye’s Mandiant threat intelligence team identified the Clop ransomware operators as the criminal group behind the Accellion breach.

Intel and its partners discovered 231 vulnerabilities affecting the companies product portfolio. None are known to have been exploited.

“The pandemic was the heyday that attackers were looking for,” said Limor Kessem, executive security advisor at IBM Security.

Google Puts Kubernetes on Autopilot; VMware Squashes Bugs; and Juniper Mists 128 Technology with AI

Remote code execution vulnerabilities pose especially critical threats to organizations, and VMware’s stronghold in data centers worldwide give patching these flaws particular urgency.

Telus inked a 10-year Google Cloud deal; Fortinet's firewalls and web apps were hit by a security flaw; and Oracle Hybrid Cloud roved to the edge.

Two of the four vulnerabilities are particularly potent as they didn't require authorization to exploit, said Positive Technologies' Andrey Medov.

Cisco Secure Application continually scans code execution to prevent exploits and can automatically block attacks, the vendor says.

According Palo Alto Networks’ threat intelligence team, 83% of medical imaging devices run on unsupported operating systems, which makes them potential avenues for attackers.

Cisco warns the "critical" security flaws could be used to gain root access or trigger a denial of service attack.

The forecast comes on the heels of a record $54.1 billion spent on the cybersecurity space in 2020, which unfortunately also witnessed some of the largest security breaches to

VMware CEO Gelsinger jumped to Intel; Rakuten Mobile employee swiped SoftBank 5G tech; and Oracle's converged cloud database got 200 updates.

The vendor claims that Armis Asset Management can see about five-times more assets compared to standalone endpoint detection and response and configuration and vulnerability management tools.

The conditions under which a security key using an effected chipset could be cloned are akin to something seen in a Mission Impossible film.

“We’re bullish on gaining market share in a $10-billion-plus [total available market] that’s growing faster than any other segment of the security markets,” Lacework CEO Dan Hubbard said.

Fortinet extended free security training; SolarWinds was sued over Russian hack; and Cisco touted SD-WAN for home workers.

A SolarWinds investor filed a class-action lawsuit against the software vendor alleging that its executives failed to disclose security vulnerabilities that led up to the massive attack.

“While we have identified limited instances of the vulnerable SolarWinds Orion software in our own internal environment, our own internal investigation has not revealed any indication of exploitation,” VMware

The founding team built the cloud security stack for Azure and also sold an earlier startup, cloud access security broker Adallom, to Microsoft for $320 million.

The update also signals the beginning of the end of support for the Dockershim container runtime interface for Docker, which drew considerable attention to mitigate.

As a sign of success against the larger security vendor, Orca CEO Avi Shua pointed to Palo Alto Networks using legal threats and demanding Orca take down a product

In its advisory, the U.S. National Security Agency urged organizations to patch affected systems “as soon as possible.”