BuzzSec

Zero trust and XDR are complementary and both are necessary in today's modern IT environment. In this article, we discuss the intersection of zero trust and XDR. from Dark Reading https://www.darkreading.com/endpoint/zero-trust-xdr-the-new-architecture-of-defense

First-of-its-kind solution discovers and protects both data at rest and in motion. from Dark Reading https://www.darkreading.com/attacks-breaches/untitledflow-security-launches-next-gen-data-security-platform-following-10-million-seed-round

The Black Hat USA conference's silver jubilee is an opportunity to remember its defining moments, the impact it has made on the security community, and its legacy. from Dark Reading https://www.darkreading.com/edge-articles/looking-back-at-25-years-of-black-hat

A Q&A with NCC Group's Viktor Gazdag ahead of a Black Hat USA session on CI/CD pipeline risks reveals a scary, and expanding, campaign vector for software supply chain attacks and RCE. from Dark Reading https://www.darkreading.com/application-security/software-development-pipelines-cybercriminals-free-range-access-cloud-on-prem

The latest startup to enter the attack surface management space also has a free scanning service to audit the contents of any website. from Dark Reading https://www.darkreading.com/dr-tech/halo-security-emerges-from-stealth-with-full-attack-surface-management-platform

The finding exposes the danger of older, unpatched bugs, which plague at least 4.5 million devices. from Dark Reading https://www.darkreading.com/risk/researchers-debut-rce-vector-common-google-api-tool

New time series model and enhanced alerting experience make it easy for organizations to address more threats in the cloud while enabling faster investigations. from Dark Reading https://www.darkreading.com/cloud/lacework-updates-threat-detection-to-uncover-more-malicious-activity-and-speed-investigation-at-scale

Given the lack of reporting requirements, the findings are more like assumptions. Here's what organizations can do to minimize exposure. from Dark Reading https://www.darkreading.com/edge/don-t-take-the-cyber-safety-review-board-s-log4j-report-at-face-value

A new workout leads to five smart lessons about the importance of converging security and fraud into a unified risk function. from Dark Reading https://www.darkreading.com/edge-articles/what-adjustable-dumbbells-can-teach-us-about-risk-management

Securing email communication has never been more critical for organizations, and it has never been more challenging to do so. Attack volumes have increased and become more sophisticated. from Dark Reading https://www.darkreading.com/perimeter/how-email-security-is-evolving

It's a myth that consuming and processing alerts qualifies as security. Today's technology allows better detection and prevention, rather than accepting the low bar for protection set by ingrained incident response reactions. from Dark Reading https://www.darkreading.com/vulnerabilities-threats/the-myth-of-protection-online-and-what-comes-next

Serial entrepreneur, cybersecurity leader, and industry veteran joins ShiftLeft to drive growth and AI/ML innovation globally. from Dark Reading https://www.darkreading.com/application-security/shiftleft-appoints-prevention-first-cybersecurity-visionary-and-ai-ml-pioneer-stuart-mcclure-as-ceo

The new program offers robust protection across all five data risk categories: cyber, human, application, operation, and environmental. from Dark Reading https://www.darkreading.com/risk/druva-introduces-the-data-resiliency-guarantee-of-up-to-10-million

Todd Thibodeaux uses ChannelCon 2022 state of the industry remarks to unveil CompTIA’s Project Agora; invites broad industry participation in the effort to fight for tech talent. from Dark Reading https://www.darkreading.com/careers-and-people/comptia-ceo-outlines-initiative-to-create-the-pre-eminent-destination-to-start-build-and-supercharge-a-tech-career

Phishing operators are taking advantage of security bugs in the Amex and Snapchat websites (the latter is unpatched) to steer victims to phishing pages looking to harvest Google and Microsoft logins. from Dark Reading https://www.darkreading.com/cloud/american-express-snapchat-open-redirect-vulnerabilities-exploited-phishing

Now-convicted phone dealer reset locked and blocked phones on various mobile networks. from Dark Reading https://www.darkreading.com/attacks-breaches/t-mobile-store-owner-made-25m-with-stolen-employee-credentials

Microsoft says the new tools will give security teams an attacker's-eye view of their systems and supercharge their investigation and remediation efforts. from Dark Reading https://www.darkreading.com/threat-intelligence/microsoft-intros-threat-intel-attack-surface-management-tools

To protect against similar attacks, organizations should focus on bringing cloud entitlements and configurations under control. from Dark Reading https://www.darkreading.com/cloud/capital-one-breach-conviction-exposes-scale-of-cloud-entitlement-risk

Series C investment from BuildGroup and Gula Tech Adventures, along with appointment of Kevin Mandia to the board of directors, will propel a new chapter of company growth. from Dark Reading https://www.darkreading.com/careers-and-people/cybrary-lands-25-million-in-new-funding-round

Attackers are turning to stolen credentials and posing as trusted applications to socially engineer victims, according to Google study of malware submitted to VirusTotal. from Dark Reading https://www.darkreading.com/vulnerabilities-threats/virustotal-threat-actors-mimic-legitimate-apps-use-stolen-certs-to-spread-malware