Duncan Riley
Latest from Duncan Riley
Now-patched Azure vulnerability opened the door to remote code execution
Cloud cybersecurity startup Orca Security Ltd. today detailed the discovery of a previously unknown vulnerability in Microsoft Corp.’s Azure that allowed hackers to undertake remote code execution. Dubbed “Super FabriXss,” the vulnerability was demonstrated at BlueHat IL 2023, showing how they could escalate a reflected cross-site scripting vulnerability in Azure Service Fabric Explorer. The demonstration showed how ...
New Cado Security release addresses security issues in large language models
Cloud forensics and incident response platform startup Cado Security Ltd. today announced the availability of a new security service catering to application programming interfaces for large language models. Called Masked-AI, the open-source library enables the safe use of LLM APIs such as OpenAI LP’s GPT-4 without sending out sensitive information. Available as a download from the GitHub ...
Report finds employees are storing sensitive information on personal devices
A new report today from phishing protection company SlashNext Inc. finds that a majority of employees have sensitive work information on personal devices as “bring your own device” behavior continues to surge in popularity. The 2023 Mobile BYOD Intelligence Report surveyed individuals about the use of personal devices for work-related tasks, how employers balance corporate security and ...
Bot protection startup DataDome raises $42M to battle cyberattacks and fraud
Software-as-a-service bot protection startup DataDome SAS today announced that it has raised $42 million in new funding to support its mission to rid the web of bot-driven cyberattacks and fraud. Founded in 2014, DataDome is a bot protection startup that uses artificial intelligence and machine learning to detect and block advanced bot attacks in real time. The company’s ...
Google researchers detail recently discovered campaigns targeting iOS, Android and Chrome
Google LLC’s Threat Analysis Group today revealed the details of two recently discovered campaigns that use various unpatched or “zero-day” exploits against Android, iOS and Chrome. The first campaign was discovered in November and targeted victims through bit.ly links sent to users over SMS text messages in Italy, Malaysia and Kazakhstan. When clicked, the malicious links ...
Microsoft Defender reportedly tagging Zoom and Google as malicious sites
Microsoft Corp.’s security platform Defender, which comes installed as standard with Windows, is having a bad day today, with users reporting that the service is tagging sites such as Google and Zoom as being malicious. When it works properly, Defender is meant to stop users from visiting malicious sites, but it goes without saying that ...
CrowdStrike and Abnormal Security partner for enhanced email and endpoint attack detection
CrowdStrike Holdings Inc. today announced a new partnership with cybersecurity startup Abnormal Security Corp., including a strategic investment in the company through the CrowdStrike Falcon Fund. The CrowdStrike Abnormal Security partnership will see the integration of the CrowdStrike Falcon platform with the Abnormal platform to offer email and endpoint attack detection and response with automated ...
Noname Security enhancements help organizations protect their API ecosystem
Enterprise application programming security startup Noname Security today announced significant enhancements to its application programming interface security platform to help organizations protect their API ecosystem, secure their applications and increase cyber resilience. The release delivers new capabilities across Noname’s entire platform, including discovery, posture management, runtime protection, pre-production testing and deployment. Leading the list are enhancements to Noname ...
Perception Point partners with Cloudinary to deliver advanced threat protection
Email and collaboration security startup Perception Point Inc. today announced a new partnership with software-as-a-service technology company Cloudinary Ltd. to deliver advanced threat protection to Cloudinary customers. Under the partnership, Cloudinary customers can now protect their websites and services with the Perception Point malware detection add-on, available on the Cloudinary App Store. The service allows users to upload ...
Nile enhances protection against threats to wired and wireless networks
Enterprise network-as-a-service startup Nile Global Inc. today announced a series of new security capabilities designed to protect against threats plaguing wired and wireless networks. The company, co-founded by former Cisco Systems Inc. executives John Chambers and Pankaj Patel, launched out of stealth mode in September with a new enterprise networking platform based on zero-trust security principles. The company’s ...