Duncan Riley
Latest from Duncan Riley
FTC orders GoDaddy to strengthen security practices after years of data breaches
The U.S. Federal Trade Commission has ordered well-known web hosting provider GoDaddy Inc. to implement a robust information security program to settle charges that the company failed to secure its website-hosting service against attacks that could harm its customers. In a complaint filed Wednesday, the FTC alleged that since 2018, GoDaddy has failed to implement ...
Social trading and investment marketplace eToro reportedly files paperwork for $5B IPO
Social trading and investment marketplace company eToro Group Ltd. has reportedly filed a confidential application with U.S. regulators ahead of a potential initial public offering later this year. First reported today by the Financial Times, the IPO could value the business at more than $5 billion. The confidential nature of the filing — typical in the ...
Biden signs executive order to strengthen national cybersecurity in last days in office
Outgoing U.S. President Joe Biden signed a cybersecurity-related executive order today that’s aimed at strengthening national cybersecurity and making it easier to pursue foreign adversaries and hacking groups that try to undermine U.S. systems. The “Executive Order on Strengthening and Promoting Innovation in the Nation’s Cybersecurity” covers a range of initiatives designed to address the ...
Study finds nearly one in 10 generative AI prompts in business disclose potentially sensitive data
A new study released today by data protection startup Harmonic Security Inc. has found that nearly one in 10 prompts used by business users when using artificial intelligence disclose potentially sensitive data. The finding came from a study of business users undertaken in the fourth quarter of 2024 across generative artificial tools, including Microsoft Copilot, ...
New Contrast Security tools targets vulnerabilities in production environments
Application security startup Contrast Security Inc. today announced the release of Application Vulnerability Monitoring, a new application detection and response capability that catches vulnerabilities in products before an attack. Said to be the first solution of its kind that works within applications to find application and application programming interface vulnerabilities in products, AVM correlates vulnerabilities with known ...
New Cisco AI Defense solution safeguards AI applications and data
Cisco Systems Inc. today announced the launch of Cisco AI Defense, a new solution that safeguards artificial intelligence projects in enterprises against the misuse of AI tools, data leakage and sophisticated threats. The new service has been designed to address new safety concerns and security threats that are emerging that existing solutions are unable or ...
Orca Security unveils Sensor for enhanced cloud runtime protection
Cloud cybersecurity startup Orca Security Ltd. today announced the launch of Orca Sensor, a lightweight security solution that integrates runtime visibility and protection with the Orca Cloud Security Platform. Orca Sensor has been designed as a non-intrusive extended Berkeley Packet Filter-based sensor that provides runtime visibility and protection natively integrated with the Orca Cloud Security Platform. The sensor ...
Microsoft reveals macOS vulnerability that allowed System Integrity Protection bypass
Microsoft Threat Intelligence has revealed details of a now patched but previously unknown macOS vulnerability that could have allowed attackers to bypass Apple Inc.’s System Integrity Protection in macOS by loading third-party kernel extensions. System Integrity Protection is a macOS security feature that is designed to prevent unauthorized modifications to system files and processes, even ...
Microsoft sues cybercriminal operation that developed tools to bypass AI safety guardrails
Microsoft Corp.’s Digital Crime Unit has taken legal action to disrupt a cybercriminal operation that developed tools specifically designed to bypass the safety guardrails of generative artificial intelligence services. The complaint, filed in the Eastern District of Virginia in December, claims that the unnamed cybercriminals violate U.S. law and the Acceptable Use Policy and Code ...
Good news: Black Duck report highlights increased focus on adversarial testing and AI security risks
A new report out today from Black Duck Software Inc. sheds light on how companies are evolving their software security practices to address modern challenges. Black Duck Software was previously part of Synopsys Inc. and known as the Synopsys Software Integrity Group, before it was acquired in May and changed its name in October. The ...









