VMware Flaw a Vector in SolarWinds Breach?

U.S. government cybersecurity agencies warned this week that the attackers behind the widespread hacking spree stemming from the compromise at network software firm SolarWinds used weaknesses in other, non-SolarWinds products to attack high-value targets. According to sources, among those was a flaw in software virtualization platform VMware, which the U.S. National Security Agency (NSA) warned on Dec. 7 was being used by Russian hackers to impersonate authorized users on victim networks. Continue reading VMware Flaw a Vector in SolarWinds Breach?

Duo CEO Dug Song: We have to make security simple

Duo Security CEO Dug Song kept it simple Tuesday when he described the last decade in cybersecurity. “It sucked,” Song told the crowd at the Zero Trust Security Summit presented by Duo and produced by FedScoop and CyberScoop. The next decade doesn’t have to be that way, he says, because the technology ecosystem has the tools it needs to make security as seamless and easy to use as possible. Architectures like zero trust can become more commonplace, giving enterprises simple ways to protect themselves against the most familiar threats. At the core, it’s about ensuring that users and devices are connecting only with the data that they need. In a sit-down with CyberScoop on the sidelines of the summit, Song talked about the evolution of zero trust, how the cybersecurity market is changing, and how cybersecurity can be better woven into campaign operations. The title of the event is the Zero Trust Security Summit. “Zero trust” […]

The post Duo CEO Dug Song: We have to make security simple appeared first on CyberScoop.

Continue reading Duo CEO Dug Song: We have to make security simple

TechCrunch Disrupt offers plenty of options for attendees with an eye on the enterprise

We might have just completed a full-day program devoted completely to enterprise at TechCrunch Sessions: Enterprise last week, but it doesn’t mean we plan to sell that subject short at TechCrunch Disrupt next month in San Francisco. In fact, we have something for everyone from startups to established public companies and everything in between along […] Continue reading TechCrunch Disrupt offers plenty of options for attendees with an eye on the enterprise

TechCrunch Disrupt offers plenty of options for attendees with an eye on the enterprise

We might have just completed a full-day program devoted completely to enterprise at TechCrunch Sessions: Enterprise last week, but it doesn’t mean we plan to sell that subject short at TechCrunch Disrupt next month in San Francisco. In fact, we have something for everyone from startups to established public companies and everything in between along […] Continue reading TechCrunch Disrupt offers plenty of options for attendees with an eye on the enterprise

Consolidation is coming for the cybersecurity industry

It’s starting to happen. Amid a flurry of mergers and acquisitions, the cybersecurity industry is embarking on a path of consolidation that analysts predict will result in the existence of far fewer companies within just a few years. Thousands of cybersecurity vendors are in the marketplace, offering services ranging from anti-phishing and malicious software analysis to threat detection that relies on artificial intelligence technology. The number of companies will reduce by half within five to seven years, as many existing firms are acquired by larger players, and others simply go out of business, said Bill Crowell, a partner at the venture capital firm Alsop Louie Partners. “Cyber defense is about having an integrated set of tools that work together to prevent attacks,” said Crowell, a former deputy director of the U.S. National Security Agency. “But the industry now has a thousand points of light and no illumination. It’s as if […]

The post Consolidation is coming for the cybersecurity industry appeared first on Cyberscoop.

Continue reading Consolidation is coming for the cybersecurity industry

Instagram’s New Security Tools are a Welcome Step, But Not Enough

Instagram users should soon have more secure options for protecting their accounts against Internet bad guys.  On Tuesday, the Facebook-owned social network said it is in the process of rolling out support for third-party authentication apps. Unfo… Continue reading Instagram’s New Security Tools are a Welcome Step, But Not Enough