Security News

Since 2014, the US government has suffered 822 breaches affecting nearly 175 million records. Based on the average cost per breached record (as reported by IBM each year), Comparitech estimate these breaches have cost government entities over $26 billion from 2014 to October 2022. In 2018 and 2019, the number of government breaches hit an all-time high with 116 and 118 breaches respectively. In 2020, breaches decreased to 107 before increasing again to 116 in...

Cato Networks, the world’s leading single-vendor SASE platform provider,  has announced it has grown its annual recurring revenue (ARR) from $1 million to $100 million in just five years. This best-in-class performance for enterprise network security compares with LinkedIn and faster than consumer-oriented brands, such as Twilio, Wix, Zapier, Canva, and Shopify.   Like these companies, Cato was the first to bring a born-for-the-cloud architecture to disrupt its category. Since its founding in 2015, Cato's...

Armis, the asset visibility and security company, has announced its Armis Partner Experience (APEX) Manage Program, a  partner program for Managed Service Providers (MSPs) and Managed Detection and Response Providers (MDRs). The APEX Manage Program is an evolution of the channel partner APEX Program launched by Armis one year ago. The company says APEX Manage aims to elevate and enrich service providers with a modern approach to building cyber investigation, detection, threat hunting, and remediation...

Illusive has announced the release of its enhanced Identity Threat Detection and Response (ITDR) platform. The new features enable organisations to visualise misconfigurations in and between Active Directory and Azure Active Directory domains, as well as to discover and remediate Kerberoastable identity risks and privileged accounts unmanaged by privileged access management (PAM). Additionally, Illusive visually correlates all identity risks with the MITRE ATT&CK framework so that organisations can more easily manage identity risk. According to...

It is a scenario anyone who works in an office can imagine all too easily; You’ve locked yourself out of your email accounts, and the myriad complexity of your own authentication systems leaves you locked out for hours at a time.  This scenario is felt even more keenly from the IT and security departments charged with managing this system of complexity, according to a new survey conducted by Axiad, who today announced the results of...

Analysing the software security practices of 130 organisations including Adobe, PayPal and Lenovo, Synopsys's Building Security in Maturity Model (BSIMM) report has found a nearly 50% surge in activities to secure open source software components and integrate security into developer toolchains; indicating greater initiative to tackle software supply chain security over the last 12 months. The findings highlight a significant increase in activities that indicate BSIMM member organizations are implementing a “shift everywhere” approach to...

Feedzai has been named Best Transaction Fraud Monitoring and Decisioning Innovation in the Aite-Novarica Group 2022 Fraud Impact Innovation Awards. The award highlights how Feedzai empowers the bank's data scientists to protect customers from scams and other fraud using a patented algorithm and providing a 360-degree entity view of payment risk. Due to its proficiency in mitigating fraud risk, Feedzai’s patent innovation is helping many financial institutions including Lloyds Banking Group, one of the largest retail...

Searchlight Security, the dark web intelligence company, has announced a new automated reporting function for their dark web monitoring solution DarkIQ. The new reporting function will help security teams and MSSPs communicate pre-attack intelligence to executives, quickly and efficiently. The DarkIQ platform is a powerful dark web monitoring solution that utilises the most comprehensive dark web dataset on the market. It is the only dark web monitoring tool that keeps track of web traffic to and...

Yesterday, Cato Networks introduced its new risk-based application access control for combatting the threat of infiltration posed by remote workers and Bring Your Own Device (BYOD). Now, enterprise policies will be able to consider real-time device context when restricting access to certain capabilities within corporate applications, the internet and cloud resources. "User devices can be notoriously unprotected, opening a backdoor into enterprise networks," says Eyal Webber-Zvik, vice president of product marketing at Cato Networks. "Today’s...