DigitalOcean says customer billing data accessed in data breach

DigitalOcean has emailed customers warning of a data breach involving customers’ billing data, TechCrunch has learned. The cloud infrastructure giant told customers in an email on Wednesday, obtained by TechCrunch, that it has “confirmed an unauthorized exposure of details associated with the billing profile on your DigitalOcean account.” The company said the person “gained access […] Continue reading DigitalOcean says customer billing data accessed in data breach

Ivanti has acquired security firms MobileIron and Pulse Secure

IT security software company Ivanti has acquired two security companies: enterprise mobile security firm MobileIron, and corporate virtual network provider Pulse Secure. In a statement on Tuesday, Ivanti said it bought MobileIron for $872 million in stock, with 91% of the shareholders voting in favor of the deal; and acquired Pulse Secure from its parent […] Continue reading Ivanti has acquired security firms MobileIron and Pulse Secure

A SonicWall cloud bug exposed corporate networks to hackers

A newly discovered bug in a cloud system used to manage SonicWall firewalls could have allowed hackers to break into thousands of corporate networks. Enterprise firewalls and virtual private network appliances are vital gatekeepers tasked with protecting corporate networks from hackers and cyberattacks while still letting in employees working from home during the pandemic. Even […] Continue reading A SonicWall cloud bug exposed corporate networks to hackers

Decrypted: Chegg’s third time unlucky, Okta’s new CSO Rapid7 beefs up cloud security

Ransomware is getting sneakier and smarter. The latest example comes from ExecuPharm, a little-known but major outsourced pharmaceutical company that confirmed it was hit by a new type of ransomware last month. The incursion not only encrypted the company’s network and files, hackers also exfiltrated vast amounts of data from the network. The company was […] Continue reading Decrypted: Chegg’s third time unlucky, Okta’s new CSO Rapid7 beefs up cloud security

Cyber-skills platform Immersive Labs raises $40M in North America expansion

Immersive Labs, a cybersecurity skills platform, has raised $40 million in its Series B, the company’s second round of funding this year following an $8 million Series A in January. Summit Partners led the fundraise with Goldman Sachs participating, the Bristol, U.K.-based company confirmed. Immersive, led by former GCHQ cybersecurity instructor James Hadley, helps corporate […] Continue reading Cyber-skills platform Immersive Labs raises $40M in North America expansion

Flaw in Cyberoam firewalls exposed corporate networks to hackers

Sophos said it is fixing a vulnerability in its Cyberoam firewall appliances, which a security researcher says can allow an attacker to gain access to a company’s internal network without needing a password. The vulnerability allows an attacker to remotely gain “root” permissions on a vulnerable device, giving them the highest level of access, by […] Continue reading Flaw in Cyberoam firewalls exposed corporate networks to hackers

Osano makes business risk and compliance (somewhat) sexy again

A new startup is clearing the way for other companies to better monitor and manage their risk and compliance with privacy laws. Osano, an Austin, Texas-based startup, bills itself as a privacy platform startup, which uses a software-as-a-service solution to give businesses real-time visibility into their current privacy and compliance posture. On one hand, that […] Continue reading Osano makes business risk and compliance (somewhat) sexy again

Axonius, a cybersecurity asset management startup, raises $20M in Series B

Cybersecurity asset management startup Axonius has raised $20 million in its second round of funding this year. Venture capital firm OpenView led the Series B, joining existing investors in bringing $37 million to date following the startup’s $13 million Series A in February. The security startup, founded in 2017, helps companies keep track of their […] Continue reading Axonius, a cybersecurity asset management startup, raises $20M in Series B

United Airlines CISO Emily Heath joins TC Sessions: Enterprise this September

In an era of massive data breaches, most recently the Capital One fiasco, the risk of a cyberattack and the costly consequences are the top existential threat to corporations big and small. At TechCrunch’s first-ever enterprise-focused event (p.s. early bird sales end August 9), that topic will be front and center throughout the day. That’s […] Continue reading United Airlines CISO Emily Heath joins TC Sessions: Enterprise this September

Some sage security advice after Radiohead’s unreleased music hack

Bad news: Radiohead was hacked. Last week, a hacker stole the band’s lead singer Thom Yorke’s private minidisk archive from the band’s third album and subsequent major worldwide hit, “OK Computer.” The hacker demanded $150,000 or they’d release it to the public. Stuck between a ransom and a hard place, Radiohead released the tapes themselves. …

Continue reading “Some sage security advice after Radiohead’s unreleased music hack”

Continue reading Some sage security advice after Radiohead’s unreleased music hack