Tag: startup
-
Google OAuth Vulnerability Exposes Millions via Failed Startup Domains
New research has pulled back the curtain on a “deficiency” in Google’s “Sign in with Google” authentication flow that exploits a quirk in domain ownership to gain access to sensitive data.”Google’s OAuth login doesn’t protect against someone purchasing a failed startup’s domain and using it to re-create email accounts for former employees,” Truffle Security co-founder…
-
Google’s >>Sign in with Google<< Flaw Exposes Millions of Users' Details
A critical flaw in Google’s >>Sign in with Google>Sign in with Google
-
How Barcelona became an unlikely hub for spyware startups
Barcelona’s mix of affordable cost of living and quality of life has helped create a vibrant startup community, and become a hotbed for the creation of surveillance technologies. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/13/how-barcelona-became-an-unlikely-hub-for-spyware-startups/
-
Noma Security’s Niv Braun shares how he went from Unit 8200 to the cybersecurity startup world
First seen on scworld.com Jump to article: www.scworld.com/resource/noma-securitys-niv-braun-shares-how-he-went-from-unit-8200-to-the-cybersecurity-startup-world
-
Darktrace To Acquire Cado Security, Boosting Cloud Threat Investigation
Darktrace announced a deal to acquire cloud threat investigation startup Cado Security, following its own acquisition by private equity firm Thoma Bravo. First seen on crn.com Jump to article: www.crn.com/news/security/2025/darktrace-to-acquire-cado-security-boosting-cloud-threat-investigation
-
Flock Safety quietly hired a sitting California mayor. Now he’s suing Flock.
Tags: startupLast year, police surveillance startup Flock Safety hired the mayor of a California city with over 200,000 residents to promote its products. But the mayor, Ulises Cabrera of Moreno Valley, now claims Flock wrongfully terminated him, partly because he refused to use his position as mayor to benefit Flock, according to a lawsuit Cabrera filed…
-
Veracode Fuels Supply Chain Security With Phylum Acquisition
Phylum’s Product Delivers Real-Time Detection of Malicious Open-Source Packages. To combat the rise in software supply chain attacks, Veracode has acquired Denver-area startup Phylum and its advanced tools to detect malicious open-source packages. The acquisition strengthens Veracode’s software composition analysis offering and enables faster, more reliable threat mitigation. First seen on govinfosecurity.com Jump to article:…
-
Veracode Boosts Supply Chain Security Via Phylum Acquisition
Phylum’s Product Delivers Real-Time Detection of Malicious Open-Source Packages. To combat the rise in software supply chain attacks, Veracode has acquired Denver-area startup Phylum and its advanced tools to detect malicious open-source packages. The purchase strengthens Veracode’s software composition analysis offering and enables faster, more reliable threat mitigation. First seen on govinfosecurity.com Jump to article:…
-
10 Cybersecurity Startups To Watch In 2025
Cybersecurity startups to watch in 2025 include recently funded companies with products for security operations, email protection and AI security. First seen on crn.com Jump to article: www.crn.com/news/security/2025/10-cybersecurity-startups-to-watch-in-2025
-
Veracode Looks To Boost Security For Software Supply Chain With Acquisition Of Phylum
Veracode says its acquisition of software supply chain security startup Phylum will enhance its capabilities around protecting against malicious open-source code. First seen on crn.com Jump to article: www.crn.com/news/security/2025/veracode-looks-to-boost-security-for-software-supply-chain-with-acquisition-of-phylum
-
New Year’s cybersecurity resolutions that every startup should keep
These simple cybersecurity resolutions can help keep your startup protected from most malicious hackers. First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/31/new-year-cybersecurity-resolutions-that-every-startup-should-keep/
-
Cyber firm’s Chrome extension hijacked to steal user passwords
The data-loss startup says it was targeted as part of a “wider campaign to target Chrome extension developers.” First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/27/cyberhaven-says-it-was-hacked-to-publish-a-malicious-update-to-its-chrome-extension/
-
Cyberhaven says it was hacked to publish a malicious update to its Chrome extension
The data-loss startup says it was targeted as part of a “wider campaign to target Chrome extension developers.” First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/27/cyberhaven-says-it-was-hacked-to-publish-a-malicious-update-to-its-chrome-extension/
-
Cyber startup employee hacked to distribute malicious Chrome extension
Cybersecurity startup Cyberhaven, which specializes in insider threats, said it is investigating a hack of a single administrative account that spread a malicious version of its Google Chrome browser extension.]]> First seen on therecord.media Jump to article: therecord.media/cyberhaven-hack-google-chrome-extension
-
Editors’ Panel: Cybersecurity 2024 – Thanks for the Memories
Looking Back on the Ransomware Attacks, Resilience Lessons and Tech Trends. In the latest weekly update, ISMG editors discussed defining cybersecurity moments of 2024, from the CrowdStrike outage and its implications for vendor resilience to ransomware’s continued evolution, and the shifting dynamics in the tech industry affecting startups and M&A activity. First seen on govinfosecurity.com…
-
Bureau Raises $30M to Tackle Deepfakes, Payment Fraud
San Francisco startup scores a Series B round to thwart money mule accounts, deep-fake identities, account takeovers and payment fraud. The post Bureau Raises $30M to Tackle Deepfakes, Payment Fraud appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/bureau-raises-30m-to-tackle-deepfakes-payment-fraud/
-
Cisco grabs SnapAttack for threat detection
Cisco is acquiring threat-detection startup SnapAttack for an undisclosed amount as it continues to expand its security portfolio.Established in 2001 by Booz Allen’s Dark Labs, SnapAttack is known for its threat detection and engineering technology, which melds threat intelligence, attack emulation, and behavioral analytics to help customers identify potential vulnerabilities and gaps in their networks, ideally…
-
Wald.ai Launches Data Loss Protection for AI Platforms
The cybersecurity startup’s data loss protection platform uses contextual redaction to help organizations safely use private business information across AI platforms. First seen on darkreading.com Jump to article: www.darkreading.com/data-privacy/wald-launches-data-loss-protection-for-ai-platforms
-
BlackBerry sells Cylance for $160M, a fraction of the $1.4B it paid in 2018
Arctic Wolf has acquired Cylance, BlackBerry’s beleaguered cybersecurity business, for $160 million, a significant discount from the $1.4 billion BlackBerry paid to acquire the startup in 2018. Under the terms of the deal, which is expected to close in BlackBerry’s fiscal Q4, BlackBerry will sell its Cylance assets to Arctic Wolf for $160 million […]…
-
Security leaders top 10 takeaways for 2024
Tags: access, ai, attack, automation, best-practice, breach, business, ciso, cloud, compliance, corporate, crowdstrike, cybercrime, cybersecurity, data, deep-fake, detection, email, finance, fraud, governance, group, guide, hacker, identity, incident response, infosec, ISO-27001, office, okta, phishing, privacy, programming, regulation, risk, risk-management, saas, security-incident, service, software, startup, strategy, technology, threat, tool, training, vulnerabilityThis year has been challenging for CISOs, with a growing burden of responsibility, the push to make cybersecurity a business enabler, the threat of legal liability for security incidents, and an expanding attack landscape.As the year comes to a close, CISOs reflect on some of the takeaways that have shaped the security landscape in 2024.…
-
The Hidden Risks of Mobile Calls and Messages: Why EndEnd Encryption is Just the Starting Line
Tags: access, android, breach, business, communications, control, cybercrime, cybersecurity, data, encryption, endpoint, espionage, government, identity, intelligence, mobile, network, risk, service, startup, technology, threat, tool, update, vulnerabilityThe recent breaches of sovereign telecom networks in the United States, underscores how highly connected but fragmented public networks are increasingly vulnerable to sophisticated attacks. Another rising concern is the blind trust organizations and individuals put into consumer-grade messaging apps such as WhatsApp to share government and commercially-sensitive information. Some of the biggest risks concerning these…
-
Cloud Access Security Broker ein Kaufratgeber
Tags: access, ai, api, authentication, cisco, cloud, compliance, control, cyberattack, data, detection, endpoint, exploit, gartner, governance, intelligence, mail, malware, microsoft, monitoring, network, phishing, ransomware, risk, saas, service, software, startup, threat, tool, zero-day, zero-trust -
Serhiy Tokarev Explains Why Health Tech Startups Are Worth Investing In
Tags: startupHealth Tech is booming, projected to grow from $312.92B in 2024 to $981.23B by 2032. Serhiy Tokarev highlights… First seen on hackread.com Jump to article: hackread.com/serhiy-tokarev-why-health-tech-startups-investing/
-
Silent Push Raises $10 Million for Preemptive Threat Intelligence Platform
Threat intel startup Silent Push has raised $10 million in a funding round co-led by Ten Eleven Ventures and Stepstone Group LP. The post Silent Push Raises $10 Million for Preemptive Threat Intelligence Platform appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/silent-push-raises-10-million-for-preemptive-threat-intelligence-platform/
-
AI Meets Fraud Prevention in LexisNexis-IDVerse Acquisition
LexisNexis Combines AI-Driven Document Authentication With Its Fraud Solutions. To counter AI-driven fraud, LexisNexis acquired IDVerse, a London-based startup focused on document authentication and regulatory compliance. This acquisition aims to seamlessly integrate advanced tools into LexisNexis’ fraud and identity platforms, enhancing global operations. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-meets-fraud-prevention-in-lexisnexis-idverse-acquisition-a-27032
-
Citrix Acquisitions Boost Zero-Trust Defense for Hybrid Work
deviceTrust, Strong Network Acquisitions Improve Zero Trust, Developer Protections. Citrix enhances its security for hybrid work by acquiring deviceTrust and Strong Network. Purchasing these European startups boosts protection for VDI, DaaS and cloud development, empowering organizations to enforce zero-trust principles and reduce risks across their hybrid environments. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/citrix-acquisitions-boost-zero-trust-defense-for-hybrid-work-a-27019
-
Cohesity completes its merger with Veritas; here’s how they’ll integrate
Data protection startup Cohesity completed its merger with Veritas’ enterprise data protection business, creating one entity with 12,000 customers that is valued at $7 billion. The deal was originally announced in February 2024. Cohesity valued Carlyle-owned Veritas’ data protection business at $3 billion at the time, according to CRN reporting. Cohesity declined to comment on…
-
Astrix’s $45M Series B Targets Non-Human Identity Security
Startup Aims to Secure AI Agents, Expand Global Reach, Do User Access Management. Astrix raises $45 million to advance AI agent security and expand its global presence. The company plans to double its workforce, focusing on anomaly detection and fingerprinting techniques for non-human identities along the correlating information about human and non-human identities. First seen…