Application security is changing the role of virtual administrators and expanding their job responsibilities as silos between InfoSec and the rest of the enterprise begin to converge.

The vulnerability could affect more than 300,000 organizations including large banks and governments that rely on F5 Networks' popular load balancing software BIG-IP.

“The foundational security of the cloud providers was less of a concern, and we saw more concerns over issues that [enterprises] have control over,” said CSA’s John Yeoh.

An internal security audit found 37 security vulnerability issues, including five "high-severity issues," though fixes for those problems have already been deployed.

It also added new scenario-based challenges with bounties up to $300,000 for specific challenges in Azure Security Lab and said it will offer $2 million in rewards this year

The latest bugs impact various Kubernetes versions between 1.7 and 1.15. One is linked to several bugs that have plagued the space over the past eight months.

Trinity Cyber led the pack with its $23 million Series A round led by Intel Capital.

“Before us, backup data was just an expensive insurance policy. We are the first ones to make backup data useful,” says Cohesity’s Raj Dutt,

A survey found that two-thirds of organizations are running more than 10% of their applications in a containerized environment, but 40% of those organizations think their current security stance

Urgent/11 includes six critical, remote code execution vulnerabilities. These could give an attacker full control over a targeted device via unauthenticated network packets.

Palo Alto Networks’ threat intelligence team says these vulnerabilities show that companies still struggle to secure public cloud platforms including AWS, Azure, and Google.

The container files containing the most vulnerabilities were typically the oldest files and “appear to be abandoned or are otherwise EOL’ed (end of life)," explained Kenna's Jerry Gamblin.

The China-based vendor is still likely to face U.S. opposition over its involvement in 5G networks.

The bugs could allow attackers to take over affected devices, but Cisco says it’s “not aware of any malicious use” of either of the two vulnerabilities.

The updates support automated container security deployments that NeuVector CTO Gary Duan described as a “policy-as-a-code concept.”

Joel Smith, who works with the Kubernetes Product Security Committee, described the latest bug as “high severity."

The latest update comes on the heels of Aqua's rival Twistlock being acquired by Palo Alto Networks for $410 million.

It’s based on technology that VMware acquired when it bought public cloud security startup CloudCoreo last year.

The latest flaw allows a witty attacker to target API endpoints behind the docker cp command that would allow them to read and write data on a host machine.

“If I have a threat space that is bounded and measurable, why wouldn’t you go whole hog after it? That is precisely what zero trust and microsegmentation does,” says

China is not implicitly named in the 545-word executive order, but the action is clearly directed at Chinese-based vendors Huawei and ZTE.

Like the earlier Meltdown, Spectre, and Foreshadow processor flaws, the newly discovered ZombieLoad is a side channel attack that allows hackers to steal sensitive data and keys.

Red Balloon Security disclosed two vulnerabilities in “tens of millions” of Cisco enterprise routers, switches, and firewalls that could allow hackers to remotely attack corporate networks, steal data, and

“We are dancing again. You have seen our young management in development. I hope in the next six years in moving to the cloud that only a few customers