Ryan Naraine

Palo Alto warns that attackers can access usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

VMware patches CVE-2024-38814 and warns that attackers with non-administrator privileges can execute remote code on the HCX manager.

Sophos plans to integrate Secureworks Taegis XDR platform into its MDR services across small, mid-sized, and enterprise segments.

Apple expands its Security Research Device Program to put hackable iPhones in the hands of select educators at the university level.

For the second time in as many months, VMware patches a remote code execution vulnerability first exploited at a Chinese hacking contest in June.

The SEC announces penalties against Unisys, Avaya, Check Point and Mimecast for downplaying the impact of the SolarWinds Orion hack.

Stream.Security (formerly Lightlytics) has raised a total of $55 million since launching in 2020 with a cloud data security product.

Google has launched new technology to embed watermarks and flag AI-generated content as part of a push to address growing challenges in verifying the authenticity of generative AI outputs across text, images, audio, and video.

GreyNoise Intelligence says an internal AI tool captured attempts to exploit critical vulnerabilities in commercial livestream IoT cameras.

A stealthy network backdoor found on hacked Sophos XG firewall devices is programmed to work on a broader range of Linux-based devices.