Sean Michael Kerner

OpenStack database-as-a-service (DBaaS) vendor Tesora released version 1.5 of Tesora Enterprise 1.5 today, providing users with new features including several that are part of the upcoming OpenStack Liberty release. Tesora is a venture-backed vendor that has raised $14.5 million in funding to date, including a $5.8 million round announced on Aug. 13. The company is […]

Months after the U.S. Office of Personnel Management (OPM) first disclosed that it was the victim of a data breach, the details about its full extent are still coming out. In June, OPM first reported that the breach affected approximately 4 million current and former federal employees. In July, OPM dramatically revised the impact upward […]

Avi Kivity is well-known in the open-source and Linux communities as the original lead developer of the widely deployed KVM hypervisor. In 2012, Kivity started a company called Cloudius Systems, which develops the OSv operating system for the cloud. Today, Cloudius is being rebranded and refocused under the name ScyllaDB. ScyllaDB is a new NoSQL […]

Security intelligence is a hot buzzword in the modern IT marketplace, but it’s a term that means different things, depending on the vendor and the context. Security vendor Digital Shadows has a specific viewpoint on security intelligence, with a goal to provide cyber situational awareness. Digital Shadows announced the release of its Digital Shadows SearchLight […]

Attackers are now using increasingly sophisticated methods to get malicious applications into legitimate locations. The latest incident is a new attack against the Google Play store in which a malicious app was able to get past Google’s security—not once, but twice. The malicious app is called Brain Test, and prior to its removal by Google […]

Bugs have value, especially when they can be chained together to create an exploit. Today, zero-day vulnerability acquisition vendor Zerodium is offering the highest bug bounty ever announced: a $1 million award for a browser-based, untethered jailbreak against Apple’s new iOS 9 mobile operating system. Zerodium isn’t just offering a single prize either, but rather […]

Since 2003, Xcode has been Apple’s premier integrated development environment (IDE), first for OS X and beginning in 2007 for iOS. Xcode, or at least a fraudulent version of Xcode, is now at the heart of a new malware attack on Apple’s App Store and is affecting at least 39 apps, including We Chat, which […]

The emerging world of cryptocurrency is coming under new scrutiny, thanks to a Sept. 17 ruling from the Commodity Futures Trading Commission (CFTC), which has regulatory authority over the U.S. commodity future markets and is now wading into the cryptocurrency world with Bitcoin. The CFTC’s interest in Bitcoin is beginning by way of an action […]

The open-source Docker container technology is popular for a number of reasons, particularly ease of virtualized application development and deployment. A key tool in the Docker arsenal for development and deployment is Docker Hub—which was launched in June 2014 by Docker Inc., the lead commercial sponsor behind Docker—and has grown significantly over the course of […]

The open-source Ceph distributed object store and file system has emerged in recent years as a popular component of cloud, particularly OpenStack, deployments. That popularity may have made Ceph an attractive target for attackers, as Red Hat warned on Sept. 17 that there was a breach on a pair of Ceph Websites. Red Hat—which last […]

Data analytics provider Splunk is forging ahead with expanding its security capabilities, thanks in part to the July acquisition of behavioral analytics vendor Caspida for $190 million. In a video interview with eWEEK, Muddu Sudhakar, former CEO of Caspida, and Haiyan Song, senior vice president of security markets at Splunk, provide some insight into how […]

In addition to many new features, Apple’s iOS 9 addresses a long list of security vulnerabilities. The iOS 9 security updates follow the iOS 8.4 security updates, which came out June 30. Apple Pay received a patch for a vulnerability identified as CVE-2015-5916 that erroneously enables transaction log functionality on some configurations. Among the key […]