Duncan Riley
Latest from Duncan Riley
Government issues Conti ransomware alert following rapid increase in attacks
The U.S. government has issued a new warning concerning Conti ransomware attacks following a rapid increase in Conti attacks. The joint alert from the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation states that more than 400 attacks on U.S. and international organizations have been seen recently. The ...
Apple releases updates for iOS and macOS to address exploited vulnerabilities
Apple Inc. today released updates for iOS and macOS that address several vulnerabilities currently being exploited in the wild. The updates, iOS 12.5.5, for older models that can’t run iOS 15, and Security Update 2021-006 Catalina, both address the vulnerability known as CVE-2021-30869. The XNU vulnerability affects macOS as well as iPhone 5s, iPhone 6, iPhone ...
JavaScript protection and webpage monitoring startup Jscrambler raises $15M
JavaScript protection and webpage monitoring startup Jscrambler today announced that it has raised $15 million in new funding to augment marketing and sales resources, as well as strengthen and accelerate its product roadmap to meet current customers’ expanding requirements. Ace Capital Partners led the Series A round, with Portugal Ventures also participating. Founded in 2014, Jscrambler ...
Online event marketplace startup The Vendry raises $6.5M to scale up its products
Online event marketplace startup The Vendry LLC today announced that it has raised $6.5 million in new funding to scale up its products and expand into new markets. Peter Boyce, the founder of Stellation Capital, led the seed round. Also participating in the round were Founder Collective, Primary Ventures, WGI Group, Leadout Capital, Operator Partners, ...
Microsoft Security details extensive ‘phishing-as-a-service’ operation
Microsoft Corp. Tuesday detailed an extensive phishing-as-a-service operation that provides various services to those wishing to undertake phishing campaigns that fool people into responding to fraudulent emails with personal information. Called BulletProofLink, the operation sells phishing kits, email templates, hosting and automated services at what’s described as a relatively low cost. The service offers over ...
Design flaw in Microsoft Exchange leaks credentials to unauthenticated users
A design flaw in the Microsoft Exchange email server has been found to leak credentials to unauthenticated users. Discovered and detailed today byAmit Serper at ransomware protection company Guardicore Ltd., the issue relates to the Microsoft Autodiscover protocol. The protocol is a feature in Exchange email servers designed to ease the configuration of Exchange clients such ...
Tim Cook tells Apple employees they will be hunted down if they leak company secrets
Apple Inc. has always had a reputation as a secretive company, but a new missive from Chief Executive Officer Tim Cook takes the secrecy to a new level: The company will hunt down anyone who leaks and fire them. Ironically, the confirmation of Apple’s paranoia comes via a leaked email Cook sent to Apple employees ...
Fortanix brings tokenization capabilities to Snowflake customers
Intel Corp.-backed multicloud security firm Fortanix Inc. today announced a new partnership with Snowflake Inc. to bring external tokenization-as-a-service capabilities to Snowflake customers. Under the partnership, Fortanix’s Data Security Manager SaaS will be available to Snowflake customers to give them the ability to tokenize data inside and outside Snowflake. Tokenization is the process of substituting a sensitive ...
Blockchain management startup Blockdaemon raises $155M on valuation of $1.25B
Blockchain management startup Blockdaemon Inc. today announced that it has raised $155 million in new funding to make strategic investments and hire more people. The funding was raised on a valuation of $1.255 billion, giving Blockdaemon unicorn status for the first time. SoftBank Vision Fund 2 led the Series B round. Matrix Capital Management, Sapphire Ventures ...
Treasury Department sanctions Suex for processing ransomware payments
The U.S. Treasury Department today sanctioned a cryptocurrency exchange for its alleged role in processing ransomware payments. The Treasury’s Officer of Foreign Assets Control said in a publication of updated ransomware advisory with a cyber-related designation that it had added Suex OTC S.R.O. (aka “Successful Exchange”) to its list of Specially Designated Nationals. The SDN ...









