Autonomous data security posture management company Concentric Software Inc. today announced new deep-learning-driven detection capabilities that can find hardcoded “secrets” and key credentials in popular enterprise on-premises and cloud data repositories as well as email and messaging applications. Secrets are programmatic access keys, such as application programming interface keys, access tokens and connection strings, used ...

A threat actor who has been known to target Microsoft Corp. products in the past has started using a combination of phishing and SIM-swapping attacks to take over Microsoft Azure administrative accounts to gain access to Azure Virtual Machines. Detailed May 16 by researchers at Google LLC-owned Mandiant, the threat actor, designated UNC3944, uses the Serial ...

Developer security operations startup Ox Appsec Security Ltd. today announced the launch of OX-GPT, a ChatGPT integration to improve software supply chain security. The company says the new integration presents developers with customized fix recommendations and cut-and-paste code fixes, providing for quick remediation of critical security issues across the software supply chain. Although the rise of OpenAI LP’s ...

Kubernetes operations and cost management startup Cast AI Group Inc. today announced several new features for its platform to reduce cloud costs for organizations that are using generative artificial intelligence models. The new features from CAST AI are designed to assist organizations that are building, training and running AI models and applications in the cloud. The company argues ...

Automated threat modeling solutions provider ThreatModeler Software Inc., today announced the launch of a new partner program designed to help partners capitalize on the growing demand for DevSecOps solutions. The ThreatNet Partner Program helps partners cater to customers’ demands to address evolving threats and mitigate risk effectively, focusing on building strong relationships aligned with the company’s ...

Kubernetes co-founder Craig McLuckie and Sigstore founder Luke Hinds today announced the launch of a new software supply chain company called Stacklok, after the company raised $17.5 million in venture capital funding ahead of its reveal. Stacklok is pitched as giving the power of open-source security technologies access to developers so that they can secure software ...

The U.S. Federal Bureau of Investigation, the Cybersecurity and Infrastructure Security Agency and the Australian Cyber Security Centre have issued a joint warning about a change in tactics from a well-known ransomware group from traditional ransomware encryption to exfiltration-based extortion. The group, called BianLian, is believed to have first emerged in 2021. It came to widespread ...

Shares in Synopsys Inc. rose slightly in late trading after the electronic design automation company reported better-than-expected revenue and earnings. For its fiscal second quarter that ended April 30, Synopsys reported earnings before costs such as stock compensation of $393.3 million, or $2.54 per share, up from $390.8 million, or $2.50 per share, in the same quarter ...

Data analytics acceleration startup NeuroBlade Ltd. today announced that its NeuroBlade SQL Processing Unit will be made available to Dell Power Edge users. The collaboration, announced at the Dell Technologies World 2023 conference in Las Vegas today, is claimed to pioneer a new standard for data analytics acceleration that speeds time to insight and improves query performance ...

Israeli cybersecurity startup Entro Security Ltd. today announced that it has raised $6 million in funding to do further development of its secrets security and management platform. Secrets security protects access keys and credentials from unauthorized access, disclosure, or use. Secrets are often programmatic access keys, such as application programming interface keys, access tokens and ...