Latest

Cloud Security

Tenable's Amit Yoran Takes Medical Leave; Interim CEOs Named

Michael Novinson  •  December 5, 2024

Longtime Tenable CEO Amit Yoran is temporarily stepping aside for cancer treatment and recovery, with top deputies Stephen Vintz and Mark Thurmond stepping up to lead the organization. Yoran was diagnosed in March with a treatable form of cancer, but recently learned he needs additional treatment.

ISMG Editors: Major Crypto Mixer Decision Redefines Rules

Anna Delaney  •  November 29, 2024

In the latest weekly update, ISMG editors discussed Tornado Cash's landmark legal victory and what it means for crypto mixers, the impact of artificial intelligence on data privacy, and advancements in cybersecurity for which the industry can be thankful as it heads into 2025.

Blockchain & Cryptocurrency

Trump's Crypto Plans Raise Alarms Over Conflicts of Interest

Chris Riotta  •  November 28, 2024

President-elect Donald Trump's strong cryptocurrency support amid market volatility is raising concerns over potential conflicts of interest, with experts warning his agenda - including potential plans to appoint a White House crypto czar - could destabilize the economy and undermine public trust.

Breach Notification

Breach Roundup: Microsoft Tries Again With Windows Recall

Anviksha More  •  November 28, 2024

This week, Microsoft previews its latest attempt to introduce AI-enabled Windows Recall - now with added privacy features; over 1,000 cybercrime suspects busted in Africa; regulators report "smart" device update promises often missing; and Florida IT professional caught spying for China.

Blockchain & Cryptocurrency

Cryptohack Roundup: Judge Strikes Down 'Dealer Rule' Change

Rashmi Ramesh  •  November 28, 2024

This week's cryptohack roundup includes a U.S. federal judge striking down the SEC's expanded "Dealer Rule," a Python crypto library update stealing credentials, why digital payment apps are being excluded from some types of federal oversight, and drug cartels laundering profits via Tether.

Open XDR

N-able Strengthens Cybersecurity via $266M Adlumin Purchase

Michael Novinson  •  November 20, 2024

With Adlumin’s cloud-native XDR and MDR services, N-able consolidates its position as a leader in IT management. Buying the Washington D.C.-based security operations vendor for up to $266 million drives value through AI-powered threat detection and compliance solutions tailored for MSPs.

Data Loss Prevention (DLP)

Data Protection Startup Cyera Raises $300M on $3B Valuation

Michael Novinson  •  November 20, 2024

Cyera secures $300M in funding from Accel and Sapphire Ventures, doubling its valuation to $3 billion. The company is enhancing its data security platform by integrating DSPM with DLP and identity security capabilities, addressing enterprise demand for comprehensive solutions.

►

3rd Party Risk Management

FIs Face New Liabilities From CFPB's Rule on Open Banking

Suparna Goswami  •  November 18, 2024

The Consumer Financial Protection Bureau's open banking ruling shifts liability burdens onto banks, amplifying their responsibilities for securing data shared with third-party fintechs. John Horn at Datos Insights explains the potential for third-party breaches.

►

Fraud Management & Cybercrime

How UK is Getting Banks and Telecoms to Fight APP Scams

Suparna Goswami  •  November 15, 2024

Using predictive models to detect fraud early, the GSM Association and UK Finance have teamed up to combat APP fraud. Launched earlier this month, Scam Signal brings together banks, telecom providers and regulators to create standardized tools for proactive fraud prevention.

Endpoint Detection & Response (EDR)

Trustwave, Cybereason Merge to Form an MDR Security Stalwart

Michael Novinson  •  November 12, 2024

SoftBank-backed merger between Trustwave and Cybereason brings together leading MDR, EDR, DFIR and threat intelligence capabilities. The combined organization aims to improve AI-driven detection and enhance Microsoft E5 support, targeting enterprise, mid-market, and public sector clients worldwide.

Application Security

Snyk Acquires Probely to Strengthen API Security for AI Apps

Michael Novinson  •  November 12, 2024

By buying DAST provider Probely, Snyk bolsters its platform with advanced API security testing for early SDLC stages. This acquisition aims to help developers identify and reduce vulnerabilities in AI-driven and API-heavy applications. Full integration into Snyk's platform is slated for early 2025.

Fraud Management & Cybercrime

White House Slams Russia Over Ransomware's Healthcare Hits

Mathew J. Schwartz  •  November 11, 2024

With ransomware attacks on the rise and healthcare getting pummeled more than ever, a coalition of UN members urged countries to focus on collective critical infrastructure defense, while a senior White House official slammed Russia for continuing to harbor the criminals involved.