Cyber security - News

Cyware, the industry pioneer in threat intelligence operationalization, collaboration, and orchestrated response, and Carahsoft Technology Corp., the Trusted Government IT Solutions Provider, announced a strategic partnership. Under the agreement, Carahsoft will serve as Cyware’s Public Sector distributor, making Cyware’s solutions available to State, Local, Tribal, and Territorial (SLTT) agencies through Carahsoft’s reseller partners and National Association of State Procurem...

Immersive, the pioneer in people-centric cybersecurity, announces its Immersive One AI-powered Lab Builder feature to give customers and partners powerful new ways to rapidly improve cyber skills across teams through customized labs and learning experiences. With this new tool supporting Immersive’s Prove, Improve, Benchmark, and Report (PIBR) approach, cyber pioneers will be able to easily create hands-on exercises and simulations for their technical workforce, including offensive, defen...

AMG Systems of the United Kingdom and the USA introduces the AMG Secure-Net SFP carrier, an SFP-based IP-level device that offers 128-bit encryption for traffic over any IP network. This device operates as an SFP carrier and can host most standard MSA-compliant 100Mb or 1Gb SFP modules. The Secure-Net SFP carrier transparently envelopes a wide variety of SFPs, enabling full reuse of existing equipment and easy deployment across various infrastructure types, including both fibre and copper...

Semperis, a provider of AI-powered identity security and cyber resilience, released new research detailing Golden dMSA, a critical design flaw active in delegated Managed Service Accounts (dMSA) in Windows Server 2025. The flaw can result in high-impact attacks, enabling cross-domain lateral movement and persistent access to all managed service accounts and their resources across Active Directory indefinitely. Attack technique To help further understanding of how this attack technique works i...

Vehere, a pioneering provider of AI-powered Cyber Network Intelligence, has officially rolled out its latest NDR firmware v1.8.1 that introduces a modern, intuitive user interface, delivering greater operational efficiency for security teams. Designed for mission-critical environments, it reflects Vehere's core philosophy: empower defenders with tools that reduce complexity and accelerate detection and response. What's new and why it matters Clean, modern UI: Simplifies workflows and c...

HackerOne, a pioneering provider of offensive security solutions, announces the availability of its security agent Hai in the new AI Agents and Tools category of AWS Marketplace. Customers can now use AWS Marketplace to easily discover, buy, and deploy AI agent solutions, including HackerOne’s AI security agent Hai, using their AWS accounts, accelerating AI agent and agentic workflow development. Resolution across SDLC Hai helps security teams reduce validation time by up to 75%, improv...

Exein, the embedded IoT cybersecurity company at the forefront of defending Europe’s critical infrastructure, has raised €70m in a Series C round. The round was led by Balderton and joined by Supernova and Lakestar, with 33N, United Ventures, and Partech following on from the previous round. The fresh capital will drive Exein’s ambitious global expansion plans across the US, Japan, Taiwan, and South Korea, as well as to strengthen its established European presence. Identified...

Zimperium, the global pioneer in mobile security, announces the discovery of a new, highly evasive variant of the Konfety malware targeting Android devices. Identified by Zimperium’s zLabs team, this latest version leverages advanced obfuscation and ZIP-level evasion techniques, making it significantly more difficult to detect and analyze than previous iterations. Konfety malware campaign The Konfety malware campaign uses a deceptive dual-app strategy—leveraging the same package n...

VIPRE Security Group, a pioneer and award-winning cybersecurity, privacy, and data protection company, announced the launch of its new VIPRE Integrated Email Security (IES) Solution. This Integrated Cloud Email Security (ICES) application is a cloud-based email security solution that supplements the native security of cloud email providers (such as Microsoft 365) using advanced detection techniques to identify malicious emails and suspicious activity. Comprehensive security solutions ICE...

Encompassing 200+ sessions tackling vital issues in the security profession, the recently announced GSX session lineup includes in-depth looks at timely issues within the following themes: Crime, Digital Transformation, Information Security, Law and Ethics, Managing Organizations, National Security, Physical and Operational Security, Professional Development, and Risk Management. GSX will also feature three unique keynote speakers. Read on for a closer look at these dynamic keynotes a...

With an expanding threat landscape, a surge in AI-driven products, and a commitment to innovation, NVIDIA is enhancing cybersecurity with a proactive approach by tapping into the global security researcher community. The Intigriti community includes over 125,000 ethical hackers, equipped to test mission-critical AI infrastructure at scale and speed in real-time. The new program includes a web portal that Intigriti members use as an interface to take part in finding and reporting potential cybe...

DigiCert, a global provider of digital trust, announced open registration for its annual World Quantum Readiness Day virtual event, which takes place on Wednesday, September 10, 2025. The company is also accepting submissions for its Quantum Readiness Awards. Both initiatives spotlight the critical need for current security infrastructures to adapt to the imminent reality of quantum computing.  Adopt PQC standards World Quantum Readiness Day is a catalyst for action, urging enterprises a...

Signicat, the pioneering pan-European digital identity platform, has announced its acquisition of Inverid, the pioneering Dutch provider of NFC-based digital identity verification solutions, for an undisclosed sum from majority shareholder Main Capital and the founders. Existing shareholders will reinvest a substantial part of the consideration in Signicat, underlying their strong support of the combination.  Inverid’s flagship solution The acquisition strengthens Si...

Semperis, a provider of AI-powered identity security and cyber resilience, published results from the 2025 Purple Knight Report indicating that organizations continue to struggle to identify and address security vulnerabilities in hybrid identity systems such as Active Directory, Entra ID, and Okta. Notably, the average score of 61 out of 100 is 11 points lower than the average score of 72 in the 2023 report. But users reported an average improvement of 21 points - and as high as 61 points...

artius.iD announces a strategic partnership with Pod Foods Co (Pod), the pioneer in innovative consumer brand distribution, giving it access to the firm's team of world-class AI and cybersecurity specialists alongside its proprietary decentralized digital identification technology. The move is part of Pod's commitment to safeguard sensitive customer information at every stage and strengthen its digital-first infrastructure. The announcement follows a series of major cyberattacks across the...

MetTel, a pioneer in digital transformation and managed mobility solutions, announces a strategic partnership with Check Point Software Technologies to deliver an advanced mobile threat defense solution for enterprise customers. MetTel’s fully managed Mobile Threat Defense solution, powered by Check Point Harmony Mobile, provides comprehensive protection against mobile cyber threats, ensuring secure access to corporate data without compromising user experience or privacy. Mobile security...

Zimperium, the world pioneer in mobile security, reveals new zLabs research detailing an advanced evolution of the GodFather Android banking Trojan that weaponizes on-device virtualization to hijack nearly 500 legitimate mobile applications. The technique allows attackers to run the real app inside a malicious sandbox, capture every tap and credential in real time, and bypass traditional overlay-based defenses. GodFather Android banking Trojan The following are some features of the GodFa...

Bird Home Automation GmbH has successfully been certified by TÜV Saarland according to the internationally recognized DIN EN ISO/IEC 27001:2024 standard. By completing this comprehensive audit, the company demonstrates that it meets the highest standards in information security and has established an effective Information Security Management System (ISMS). ISO/IEC 27001 is the leading global standard for information security management. It sets the framework for identifying, assessing, and...

Commvault, a pioneering provider of cyber resilience and data protection solutions for the hybrid cloud, announced Alan Atkinson has become the company’s first Chief Business Development Officer. In this new role, he will build strategic next-gen technology and security partnerships, drive co-development initiatives, and create new go-to-market opportunities for Commvault and its partners, all within the Business Development organization led by Chief Trust Officer Danielle Sheer. &n...

Invicti, the pioneer in dynamic application security testing (DAST), announced the launch of its next-gen Application Security Platform featuring AI-powered scanning capabilities, enhanced DAST performance, and full-spectrum visibility into application risk. The platform enables organizations to detect and fix real vulnerabilities faster and with greater accuracy. DAST-first platform “Your applications are dynamic, shouldn’t your AppSec tools be too?” said Neil Roseman, CEO...

Corero, the distributed denial of service ("DDoS") protection specialists, is pleased to announce the first two customer wins adopting CORE (Corero Observability and Resiliency Ecosystem) architecture – Corero’s next-generation platform designed to unify visibility and defensive action across disparate security infrastructure. First announced on 29 October 2024, the CORE platform initial capabilities include Traffic Analysis (“TA”), Zero Trust Access Control (&...

In 2017, 123 police CCTV surveillance cameras in Washington, D.C., were hacked and taken offline — right before a high-profile public event. The issue wasn’t the camera. It was a failure of cybersecurity compliance (Source: BBC). Imagine a scenario where a major supplier loses a multi-crore government contract in India because their CCTV cameras lacked a mandatory RDSO certification for use on moving coaches. Why are certifications necessary In both cases, the cameras worked. But...

Hanwha Vision, the vision solution provider, launches the AI remote-head camera, featuring a single-body design with support for up to four channels, ideal for a multitude of applications and sites. This advanced multi-sensor solution delivers intelligence and comprehensive monitoring in a compact and discreet form. Covert monitoring and collection An intelligent design developed for a range of uses where a discreet presence is needed, or for the monitoring of more confined spaces, for exampl...

Commvault, a pioneering provider of cyber resilience and data protection solutions for the hybrid cloud, has announced a strategic partnership with Bytes, a pioneering provider of IT solutions across the UK and Ireland. This partnership will focus on providing the joint customer base with the tools and services needed to advance their cyber resilience in the UKI.  Service-led sales motion Commvault is doubling down on its ambition in the UKI, with the aim of expanding market share The s...

Global pioneer in automated IoT security and identity management, Device Authority announces the 2025 release of its award-winning KeyScaler and KeyScaler as a Service (KSaaS) platform, which enables a more streamlined experience to simplify and strengthen the lifecycle of organizations’ unmanaged devices as well as new AI-powered capabilities that underpin the entire platform. Attacks such as the recent Eleven11Bot botnet have again highlighted the potential vulnerabilities surrounding u...

An upgrade to the Johnson Controls flagship building automation system (BAS), Metasys 14.1 offers a suite of new and enhanced features that answers the need for more comprehensive energy management. The BAS, which combines HVAC, fire, security and lighting systems into one, seamless platform, allows facility managers, IT teams and decision makers to optimize operations, fortify cybersecurity, advance energy and emissions goals, boost productivity and strategically modernize facilities. Buildin...

Keysight’s Application and Threat Intelligence (ATI) research team has uncovered a novel Transport Layer Security (TLS) handshake exploit that uses protocol-compliant behavior to evade traditional network defenses. This newly discovered covert channel allows attackers to manipulate TLS handshake packets by simply rearranging parameter settings, without injecting malicious code, making detection by firewalls and intrusion prevention systems nearly impossible. By leveraging the flexible, p...

The rapid growth of e-commerce has transformed global markets and is creating new opportunities. The downside is that e-commerce also introduces significant challenges in consumer safety, market fairness, and regulatory compliance. The European Commission provides a framework for addressing these challenges through a technical approach that ensures a level playing field for all market operators. These actions are part of the Communication on e-Commerce, ‘A Comprehensive EU Toolbox for Sa...

Semperis, a provider of AI-powered identity security and cyber resilience, released new research into nOAuth known vulnerability in Microsoft’s Entra ID that enables full account takeover in vulnerable SaaS apps with minimal attacker effort, posing a severe risk to enterprises relying on cross-tenant Entra integrations. Eric Woodruff, Semperis’ Chief Identity Architect, presented his findings this week at the Troopers 2025 in Heidelberg, Germany. Semperis’ follow-up research...

iDenfy, a global pioneer in identity verification and fraud prevention technologies, announces a new partnership with QwikPay, an innovative Australian fintech startup transforming consumers' and merchants' payment experience. With this collaboration, QwikPay has integrated iDenfy’s identity verification and Anti-Money Laundering (AML) solutions to support secure, real-time user onboarding while maintaining compliance with Australia’s financial regulations. QwikPay operates on the...