Security intelligence firm LogRhythm Inc. today announced enhancements to its security solutions. They include improvements to its Machine Data Intelligence Fabric, simplified data retention via Amazon Web Services Inc.’s S3, compliance frameworks for National Institute of Standards and Technology standards, and a JSON normalization wizard as part of security information and events management updates. JSON, short for JavaScript Object ...

A new report released today by SentinelLabs, the research arm of listed cybersecurity company SentinelOne Inc., warns of a resurgence of CapraRAT spyware targeting mobile gamers and weapons enthusiasts through malicious Android applications. CapraRAT is an Android remote-access trojan virus used by a Pakistan-linked threat actor called Transparent Tribe, also known as APT36, which first emerged around ...

A new joint guidance released by the U.S. Cybersecurity and Infrastructure Security Agency at partners is warning of the widespread and costly prevalence of memory safety vulnerabilities in critical open-source projects and an urgent need for software manufacturers to adopt memory-safe programming practices. The Exploring Memory Safety in Critical Open Source Projects guidance, created by CISA ...

Artificial intelligence-driven sales and marketing startup Clay Labs Inc. today announced that it has raised $46 million in new funding on a $500 million valuation to enhance its platform for data aggregation, customer research and AI-driven personalized messaging. Founded in 2017, Clay offers a platform designed to enhance data enrichment and streamline personalized outreach, with ...

Internet of things cloud platform provider Samsara Inc. today unveiled several new solutions for assets, training and automated workflows that are built to empower the “physical operations leaders who run the world.” The new products and solutions, announced at the company’s Beyond 24 conference in Chicago, are aimed at enhancing operational efficiency, safety and sustainability. The innovations ...

Permissions management startup AuthZed Inc. today announced that it has raised $12 million in new funding to accelerate its strategic expansion, particularly targeting small to midsized organizations. Founded in 2020 by Jake Moshenko, Joey Schorr and Jimmy Zelinskie, veterans of CoreOS and RedHat, AuthZed provides a secure and scalable permissions management system for modern applications. ...

A new report released today by Cisco Talos is warning of the implications of the recent Snowflake Inc.-related cloud data platform breach and how the comprised accounts highlight the vulnerabilities inherent in cloud environments. The Snowflake breach involved attackers using stolen login credentials to infiltrate customer accounts. The credentials were not protected by multifactor authentication, ...

Background checks, credentialing and compliance software company KarmaCheck Inc. today announced that it has raised $45 million in new funding to accelerate the development of its technology platform and expand into new industry segments. Founded in 2019 by Eric Ly, one of the co-founders of LinkedIn, KarmaCheck pitches its offering as reimagining background checks and ...

Activist investor Jana Partners LLC has taken a stake in cybersecurity solutions provider Rapid7 Inc. and is reportly planning to push the company to sell itself. Jana’s managing partner, Scott Ostfelf, unveiled the investment today and, while not saying how many shares the investment firm had acquired, described Jana’s shareholding as “significant.” The Wall Street ...

About 100,000 sites have potentially been compromised in a supply chain attack following an alleged Chinese firm’s takeover of a popular open-source library. The compromise involved the acquisition of polyfill.io, a domain name linked to the open-source Polyfill project, in February. Polyfill.io is a service that automatically provides the necessary polyfills — pieces of code ...