Microsoft Corp. has banned customers from using Azure services for cryptocurrency mining unless pre-approval is granted. The change in the Universal License Terms for Online policy came into effect on Dec. 1 but was unnoticed at the time until it was highlighted in an Azure Solution Area post. The post , widely reported today, states ...

Artificial intelligence and machine learning systems cybersecurity startup Protect AI has today emerged from stealth mode with $13.5 million in new funding and its first product, NB Defense. NB Defense is a free product that’s claimed to be the industry’s first security solution to address vulnerabilities in a core component used at the beginning of ...

Researchers at Trustwave Holdings Inc.’s SpiderLabs today detailed a new campaign that leverages Facebook infrastructure for phishing attacks and the theft of personally identifiable information. Dubbed “Meta-Phish,” the campaign starts with phishing emails that point to actual Facebook posts instead of the typical malicious phishing link. The content on Facebook is crafted to appear legitimate, ...

Cybersecurity company CrowdStrike Holdings Inc. today announced it has expanded its Falcon platform to deliver enhanced adversary-driven External Attack Surface Management technology. The expansion includes the introduction of Falcon Surface, a new standalone module that features capabilities from CrowdStrike’s recent acquisition of Reposify Ltd. The module delivers advanced EASM with enhanced adversary intelligence and real-time discovery ...

When most people think of the Danish company Lego A/S, it would be of toy bricks and childhood imagination. But Lego has moved into the digital age, offering a service called BrickLink, and unfortunately it has been found to be not very secure. A new report from application programming interface security startup Salt Security Inc. today ...

Researchers at mobile security company Zimperium Inc.’s zLabs today revealed details of a newly discovered Android malware campaign hidden in money lending apps developed with the Flutter software development kit. Flutter is a  multiplatform user interface app development framework from Google LLC that’s used to create applications that work across multiple platforms, including Android and iOS. The malware campaign, ...

Cloud security company Lacework Inc. today announced the release of new cloud security posture management capabilities that it says help organizations achieve operational excellence and effectively manage security and compliance at large scale. Lacework’s new CSPM capabilities help organizations who want better visibility into their cloud security posture so they can better understand and manage their risk ...

Cloud-native application protection platform startup Tigera Inc. today announced new capabilities that help reduce an application’s attack surface. The new features include security policy recommendations for namespaces, Federal Information Processing Standards compliance for use by federal agencies, and improved dashboards for faster troubleshooting. Tigera argues that policy development requires an advanced understanding of microservices that interact ...

New research from big-data analytics company Splunk Inc. and IDG Inc.-owned Foundry finds that public sector organizations lack the cybersecurity intelligence they need and the problem is much worse than it is for the private sector. The Splunk 2022 Public Sector Survey found that nearly half of public sector agencies struggle to leverage data to detect and prevent cybersecurity ...

Application programming interface security startup FireTail Inc. announced today that it has raised $5 million in new funding to expand coverage to multiple code languages, cloud platforms and geographies. The seed round was led by Paladin Capital Group, with Zscaler Inc., General Advance, Secure Octane and several high-profile cybersecurity executives also participating. Co-founded in 2021 ...