Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads

Software supply chain security startup Chainguard raises a $140 million Series C round that values the company at $1.2 billion.
The post Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads appeared first on SecurityWeek.
Continue reading Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads

Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine

A fresh Mandiant report documents North Korea’s APT45 as a distinct hacking team conducting cyberespionage and ransomware operations.
The post Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine appeared first on SecurityWe… Continue reading Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine

Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018

The vulnerability, tagged as CVE-2024-41110 with a CVSS severity score of 10/10, was originally found and fixed in 2018.
The post Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018 appeared first on SecurityWeek.
Continue reading Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018

Dazz Scores Hefty $50M Investment for AI-Powered Risk Remediation Tech

The new financing brings the total raised by Dazz to $110 million as investors double down on bets in the cloud security remediation space.
The post Dazz Scores Hefty $50M Investment for AI-Powered Risk Remediation Tech appeared first on SecurityWeek.
Continue reading Dazz Scores Hefty $50M Investment for AI-Powered Risk Remediation Tech

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware 

KnowBe4 chief executive Stu Sjouwerman: “We sent them their Mac workstation, and the moment it was received, it immediately started to load malware.”
The post KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware  appeared fi… Continue reading KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware 

Judge Dismisses Major SEC Charges Against SolarWinds and CISO 

Judge dismissed SEC lawsuit charging SolarWinds and CISO Timothy Brown with hiding security problems before and after the SUNBURST supply chain compromise.
The post Judge Dismisses Major SEC Charges Against SolarWinds and CISO  appeared first on Securi… Continue reading Judge Dismisses Major SEC Charges Against SolarWinds and CISO 

OpenAI Rolls Out Compliance API and Integrations for ChatGPT Enterprise

The tools are being positioned as crucial to help business customers meet requirements for regulations like FINRA, HIPAA, and GDPR.
The post OpenAI Rolls Out Compliance API and Integrations for ChatGPT Enterprise appeared first on SecurityWeek.
Continue reading OpenAI Rolls Out Compliance API and Integrations for ChatGPT Enterprise

Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns

Chinese government-backed hacking team caught breaking into organizations in shipping, logistics and automotive sectors in Europe and Asia.
The post Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns appeared first… Continue reading Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns