Duncan Riley
Latest from Duncan Riley
A new report from threat intelligence firm Cybersixgill Ltd. details worrisome current trends in cybercrime, including a falling barrier to entry driven by generative artificial intelligence services such as OpenAI LP’s ChatGPT. The State of the Cybercrime Underground report was based on an analysis …
Access abuse security startup Inside-Out Defense launches with funding from Bain & Co.
Cybersecurity startup Inside-Out Defense today launched from stealth mode with an undisclosed amount of funding from Bain & Co. Inc. to provide real-time detection and remediation to privilege access abuse. Inside-Out Defense is a software-as-a-service, agentless privilege access abuse detection and remediation platform …
Cybersecurity teams struggle to monitor vulnerabilities amid budget cuts and layoffs
Penetration testing-as-a-service company Cobalt Labs Inc. detailed in a new report today the impact of budget cuts and talent shortages in the cybersecurity industry and it’s not good news: Cyber teams are struggling to manage the remediation process and monitor for vulnerabilities. Cobalt’s …
OpenAI teams with Bugcrowd to offer cybersecurity bug bounty program
OpenAI LP, the company behind ChatGPT, has teamed with crowdsourced cybersecurity startup Bugcrowd Inc. to offer a bug bounty program to address cybersecurity risks in its artificial intelligence models. The bug bounty program is offering rewards from $200 to $20,000 to security researchers …
Little-known Israeli vendor found selling dangerous iPhone spyware
New reports released today from Microsoft Corp. and Citizen Lab detailed a little-known Israeli spyware vendor whose software has been used by governments to hack and spy on iPhones belonging to journalists, political figures and nongovernment organizations. The company goes by the name …
SGNL launches free, non-commercial Continuous Access Evaluation Protocol/Profile Transmitter
Enterprise authorization startup SGNL.ai Inc. today announced the launch of a free, noncommercial Continuous Access Evaluation Protocol/Profile Transmitter. The idea behind the Continuous Access Evaluation Protocol was first conceived by a Google LLC software in 2019. Since that time, an informal standards development …
CrowdStrike expands platform to deliver endpoint detection to IoT assets
Cybersecurity company CrowdStrike Holdings Inc. today announced it has expanded its CrowdStrike Falcon platform to deliver a new endpoint detection and response and extended detection and response solution for what’s becoming known as extended Internet of Things assets. XIoT is a category …
Apple patches vulnerabilities used to target iPhones, iPads and Macs
Apple Inc. has released patches for two unpatched vulnerabilities being exploited in the wild that target Apple devices, including iPhones, iPads and Mac computers. The first vulnerability, designated CVE-2023-28205, is described by Apple as an issue in WebKit that allowed for the processing of …
Report finds 75% of security exposures don’t put organizations at risk
A new report from cybersecurity firm XM Cyber Inc. has found that three-quarters of security exposures don’t put organizations at risk, but a small number of exposures can put more than 90% of critical exposures at risk. The exposure findings were among …
Ransomware gang releases new data stolen from the City of Oakland
The ransomware gang behind an attack on the City of Oakland in February has released a second tranche of stolen data. The Play ransomware group shared 600 gigabytes of data on its leaks site in its second release, including Oakland Police Department files, council members’ …