Attackers are having a field day with the Legion tool, with capabilities that allow them to steal cloud credentials and launch SMS based attacks.

To help understand and evaluate threats to the entire software supply chain, a consortium of cybersecurity professionals released the OSC&R. Today, the group announced that the framework is now

“We are hearing stories about network teams that year-round are constantly dealing with upgrade situations," BackBox's Chanoch Marmorstein said.

Cisco accelerates its cloud security expansion with the Lightspin acquisition, marking its second deal within two months.

Cloudflare's 2023 Application Security report reveals some surprising trends as attackers take aim at Microsoft Exchange.

“We see the organizations are still in their early stage when it comes to [work-from-anywhere] strategy and solutions," Fortinet's Peter Newton said.

Avaya went bankrupt again; layoffs revealed the truth about top tech companies' DE&I stance; and Trellix discovered Cisco vulnerabilities.

As enterprises are increasingly migrating to the cloud, adversaries are adding the cloud to their targeting repertoire to expand the impact of their intrusions,

A vendor survey found 48% of respondents cited ransomware as the top concern for IT organizations heading into 2023.

One of the bugs might serve as a potential hardware supply chain risk and persist across reboots and firmware upgrades.

Four out of five developers will rely on curated open source software by 2025, according to Google Cloud VP of Infrastructure Eric Brewer.

“We give defenders the ability not only to see their exposures instantly but also to shut them down automatically,” CTO of Cortex Matt Kraning said.

Linux Foundation's OpenSSF's adoption of Microsoft's S2C2F framework means the community can also have a hand in growing and improving it.

From June to November 2021, Visa saw a 176% increase in physical skimming devices over the previous 12-month period.

“Zero trust is hard, and it's not something that any one vendor is going to be able to necessarily push the industry to completion with," John Roese said.

Palo Alto Networks SVP Ankur Shah noted more customers are asking about SBOM, but “we're still in the early days."

A software bill of materials is "a prerequisite to effective security and certainly not a full solution," CISA's Eric Goldstein said.

VMware Tanzu Application Platform 1.3 adds flexibility in terms of customers' choice of Kubernetes platforms.

DigitalOcean to acquire Cloudways; AMD releases its Corporate Responsibility Report; and GitLab on the disconnects of shifting security left.

Twitter CEO Parag Agrawal called the accusation “a false narrative that is riddled with inconsistencies and inaccuracies, and presented without important context.”

The combined platform will provide operators with a single management point for monitoring and mitigating cybersecurity threats.

The survey found 50% of security professionals said unidentified vulnerabilities can still be traced back to developer mistakes 75% of the time.

“You actually have to be deliberate about building maturity and sustaining that maturity over time,” said Luta Security's Katie Moussouris.

President Biden signs CHIPS and Science bill into law; Versa snags cloudIT as a new partner; and GlobalData finds executives confused by blockchain.