Duncan Riley
Latest from Duncan Riley
US and UK announce sanctions against alleged Chinese cyber espionage group APT 31
The U.K. and U.S. governments have announced sanctions against alleged Chinese hackers and the APT 31 threat group that was allegedly involved in hacking activities in both countries. The U.S. Department of the Treasury’s Office of Foreign Assets Control announced today that it had sanctioned Wuhan Xiaoruizhi Science and Technology Co. Ltd., an alleged China-based ...
New solution from Nametag targets AI-generated deepfake security threats
Identity verification platform startup Nametag Inc. today announced the launch of a new self-service account recovery solution that prevents artificial intelligence-generated deepfake attacks. Called Nametag Autopilot, the new service has been designed to prevent social engineering and impersonation attacks while saving organizations millions by deflecting time-consuming password and multifactor authentication resets to self-service. The problem ...
Researchers uncover unfixable vulnerability in Apple CPUs affecting cryptographic security
A newly published paper from researchers details an unpatchable vulnerability in Apple Inc.’s M series of chips that allows attackers to extract secret keys used in cryptography operations. Dubbed GoFetch, the vulnerability can be exploited by a side-channel attack, which exploits indirect information to uncover secret data, such as cryptographic keys. In the GoFetch scenario, the method ...
AttackIQ’s Ready! 2.0 update enhances cyber defense with on-demand testing
Security optimization platform company AttackIQ Inc. today announced AttackIQ Ready! 2.0, a managed breach and attack simulation-as-a-service that combines fully automated and on-demand adversary emulation testing to allow organizations to rapidly validate their cyber defense. AttackIQ Ready! 2.0 introduces added customization and seamless integration with AttackIQ’s Flex service to extend testing anywhere through a simplified user experience. The combination ...
Darwinium introduces behavior identification to strengthen online transaction security
Australian digital security and fraud prevention startup Darwinium Pty. Ltd. today announced the addition of behavior identification to its security and fraud prevention solution to give companies insight and surety when validating online transactions and user journeys. The features for verifying the authenticity of an online user and the intent behind their digital interactions is provided by ...
Newcomer BlueFlag Security raises $11.5M for developer-centric security platform
New cybersecurity company BlueFlag Security today launched with $11.5 million in funding to assist in the development of its software development lifecycle security and governance platform. Founded by Raj Mallempati and Ken Schneider, BlueFlag Security offers a multilayered defense platform that integrates identity security with open-source software risk management and developer tool posture management. The ...
Cyber risk startup CyberSaint raises $21M for platform development and expansion
Cyber risk management startup CyberSaint Inc. today announced that it has raised $21 million in new funding to build on customer momentum, accelerate market expansion and continue the development of its CyberStrong platform. Founded in 2016, CyberSaint offers a platform that allows enterprises to assess, measure, remediate and communicate their cyber risk posture. The platform automates assessments, ...
DOJ sues Apple over antitrust violations related to iPhones
Updated: The Department of Justice today sued Apple Inc., charging that the company prevented software and mobile game developers from offering new services on the iPhone and causing consumers to pay higher prices. The DOJ’s antitrust complaint alleges that Apple used its sole control of the iPhone to stop rivals from offering services such as ...
New IONIX Threat Center provides immediate insights into zero-day vulnerabilities
Israeli attack surface management startup Ionix Inc. today launched a new centralized threat center designed to accelerate the response of security teams to newly disclosed “zero-day” threats. The new IONIX Threat Center delivers up-to-the-minute detailed insights into exposures posed by the latest zero-day vulnerabilities — previously unknown security flaws in software or hardware that hackers can ...
Lookout and Fortra join forces for enhanced data security solutions
Cybersecurity company Lookout Inc. today announced a new strategic partnership with fellow cybersecurity company Fortra LLC to provide customers with comprehensive security coverage that protects data in the modern threat landscape. The partnership sees Fortra introducing its new Digital Guardian Secure Service Edge solution, powered by the Lookout Cloud Security Platform. The Security Service Edge offering provides ...