A new report from cybersecurity management platform company Skybox Security Inc. today details an increased need for organizations to adopt exposure management practices amid an alarming increase in new vulnerabilities.  The company’s 2023 Vulnerability and Threat Trends Report leads with the finding that there were 24,096 new vulnerabilities discovered in 2022, a 25% increase in the total number of new ...

Cloud security company Lacework Inc. today announced new cloud identity and entitlement management or CIEM features that it says will improve the observability of cloud identities and help identify potential identity threats. The new features are designed to help organizations understand which actions can be performed by specific identities and assess each identity’s risk. The platform dynamically ...

Artificial intelligence is the “in” thing in 2023, all the way through an unexpected surge in stock prices on the Nasdaq Inc. Exchange. However, hackers target all new, shiny things, and that’s the main takeaway from a new report from Vulcan Cyber Ltd. The report raises critical awareness about the potential cybersecurity risks associated with the ...

Managed identity services provider BeyondID today announced a new self-service tool designed to support organizations in upgrading to the Okta Inc. Identity Engine. The new on-demand service offers clients a clear migration roadmap, including support for navigating new features and preparing for future identity challenges. Okta’s Identity Engine is an identity platform that enables secure and flexible ...

Application programming interface security startup Traceable Inc. today announced the release of API Security Reference Architecture for Zero Trust, a guide for addressing the urgency of integrating API security into zero-trust security initiatives. Zero trust is an increasingly popular security model that operates on the principle of “never trust, always verify.” The model emphasizes continuous authentication and ...

The U.S. Cybersecurity and Infrastructure Security Agency has added a critical vulnerability in Progress Software Corp.’s MOVEit file transfer software to its Known Exploited Vulnerabilities Catalog and reportedly ordered all federal agencies to patch their systems by June 23. MOVEit is managed file transfer software developed and designed to provide secure and compliant file transfers for ...

Casepoint Inc., a legal discovery technology company that provides services to the U.S. Securities and Exchange Commission, the Department of Agricultural and various courts, today said it’s investigating a data breach after the BlackCat/ALPHV ransomware group claimed to have hacked them. BlackCat claimed on its hacking site on Tuesday that it had obtained over 2 terabytes ...

A previously unknown security issue in Google LLC’s Workspace could allow an attacker to exfiltrate data from Google Drive without being traced. Detailed Tuesday by researchers at Mitiga Security Inc., the vulnerability is the result of a forensic deficiency that allows a user to exfiltrate data without generating any record of the activity. The security issue relates ...

Shares in PagerDuty Inc. took a dive in late trading after the application observability platform reduced its outlook amid broader macroeconomic issues in the economy. For its fiscal first quarter that ended April 30, PagerDuty reported earnings before costs such as stock compensation of 20 cents per share, up from a loss of four cents per share ...

It was a tale of two cybersecurity companies today, as Zscaler Inc. reported beats in its latest quarter and outlook but SentinelOne Inc. missed on revenue and outlook, sending its share price plunging by over 35% in late trading. Zscaler reported net income before certain costs such as stock compensation of 48 cents per share ...