Duncan Riley
Latest from Duncan Riley
Researchers uncover unfixable vulnerability in Apple CPUs affecting cryptographic security
A newly published paper from researchers details an unpatchable vulnerability in Apple Inc.’s M series of chips that allows attackers to extract secret keys used in cryptography operations. Dubbed GoFetch, the vulnerability can be exploited by a side-channel attack, which exploits indirect information to uncover secret data, such as cryptographic keys. In the GoFetch scenario, the method ...
AttackIQ’s Ready! 2.0 update enhances cyber defense with on-demand testing
Security optimization platform company AttackIQ Inc. today announced AttackIQ Ready! 2.0, a managed breach and attack simulation-as-a-service that combines fully automated and on-demand adversary emulation testing to allow organizations to rapidly validate their cyber defense. AttackIQ Ready! 2.0 introduces added customization and seamless integration with AttackIQ’s Flex service to extend testing anywhere through a simplified user experience. The combination ...
Darwinium introduces behavior identification to strengthen online transaction security
Australian digital security and fraud prevention startup Darwinium Pty. Ltd. today announced the addition of behavior identification to its security and fraud prevention solution to give companies insight and surety when validating online transactions and user journeys. The features for verifying the authenticity of an online user and the intent behind their digital interactions is provided by ...
Newcomer BlueFlag Security raises $11.5M for developer-centric security platform
New cybersecurity company BlueFlag Security today launched with $11.5 million in funding to assist in the development of its software development lifecycle security and governance platform. Founded by Raj Mallempati and Ken Schneider, BlueFlag Security offers a multilayered defense platform that integrates identity security with open-source software risk management and developer tool posture management. The ...
Cyber risk startup CyberSaint raises $21M for platform development and expansion
Cyber risk management startup CyberSaint Inc. today announced that it has raised $21 million in new funding to build on customer momentum, accelerate market expansion and continue the development of its CyberStrong platform. Founded in 2016, CyberSaint offers a platform that allows enterprises to assess, measure, remediate and communicate their cyber risk posture. The platform automates assessments, ...
DOJ sues Apple over antitrust violations related to iPhones
Updated: The Department of Justice today sued Apple Inc., charging that the company prevented software and mobile game developers from offering new services on the iPhone and causing consumers to pay higher prices. The DOJ’s antitrust complaint alleges that Apple used its sole control of the iPhone to stop rivals from offering services such as ...
New IONIX Threat Center provides immediate insights into zero-day vulnerabilities
Israeli attack surface management startup Ionix Inc. today launched a new centralized threat center designed to accelerate the response of security teams to newly disclosed “zero-day” threats. The new IONIX Threat Center delivers up-to-the-minute detailed insights into exposures posed by the latest zero-day vulnerabilities — previously unknown security flaws in software or hardware that hackers can ...
Lookout and Fortra join forces for enhanced data security solutions
Cybersecurity company Lookout Inc. today announced a new strategic partnership with fellow cybersecurity company Fortra LLC to provide customers with comprehensive security coverage that protects data in the modern threat landscape. The partnership sees Fortra introducing its new Digital Guardian Secure Service Edge solution, powered by the Lookout Cloud Security Platform. The Security Service Edge offering provides ...
Venafi integrates SPIFFE standards to strengthen workload identity security
Machine identity protection firm Venafi Inc. today introduced Secure Production Identity Framework For Everyone support for Venafi Firefly, allowing security teams to ensure governance and reduce risks while accelerating development. SPIFFE is a set of open-source standards for securely identifying software services in dynamic and heterogeneous environments. The framework aims to provide a universal identity control plane, ...
Balbix’s BX4 engine leverages Nvidia AI to transform cybersecurity risk management
Cybersecurity posture startup Balbix Inc. today announced the general availability of its BX4 engine, an artificial intelligence-powered cyber risk management solution that it claims will offer unprecedented analysis capabilities, risk reduction and visibility into cybersecurity challenges. Announced at the Nvidia GTC AI conference this week in San Jose, the BX4 engine utilizes Nvidia technology to enhance cybersecurity risk ...