Sean Michael Kerner

Security startup ZeroFox today announced that it has raised $40 million in a Series C round of funding that will help the company grow its social media security technology and go-to-market efforts. The new funding round was led by Redline Capital Management and Silver Lake Waterman, bringing total funding to date for ZeroFox to $88 […]

Bug Bounties Becoming Increasingly Popular, With Payouts Rising Paying out a bug bounty—that is, rewarding a security researcher for responsibly disclosing a security vulnerability—is an increasingly popular and lucrative endeavor, according to Bugcrowd’s “2017 State of Bug Bounty” report. Bugcrowd offers its customers a managed bug bounty program that engages a “crowd” of researchers to […]

Security startup Tanium is evolving its endpoint detection and response (EDR) capabilities with a new offering called Threat Response. The technology expands on the company’s previous efforts, including Indicator of Compromise (IOC) Detect, Tanium Trace and Tanium Incident Response. “Tanium has been delivering incident response, forensics and investigation capabilities for over two years to our […]

Symantec today announced that it is acquiring privately held mobile security vendor Skycure. With the acquisition, Symantec is getting Skycure’s Mobile Threat Defense Platform, which provides organizations with multiple security capabilities, including Mobile Active Protection that helps secure devices with real-time protection. Skycure’s platform also provides an on-demand app analysis capability called the Mobile App Reputation […]

Fedora 26 Brings New Boltron Modularity Technology to Linux Servers The Fedora Linux community is set to release its second major milestone release of 2017 on July 11, with the debut of Fedora 26. Fedora is a community Linux project that is backed by Red Hat and has often served in the past as a […]

The U.S. Internal Revenue Service (IRS) is warning tax professionals about the continuing threat of phishing emails that aim to steal information about clients. The IRS said that in the first five months of 2017 there were 177 reports from tax firms or professionals of data thefts. Those thefts were of client information, involving what […]

The open-source Puppet configuration management tool is widely used by organizations to enable DevOps processes and workflows. Puppet also plays a  strong in enabling security and compliance as well, according to Deepak Giridharagopal, CTO and Chief Architect of Puppet. “If you have inputs to a system, you need to manage them over time,” Giridharagopal said. […]

Google this week released its July 2017 Android Security Bulletin, patching 137 vulnerabilities, including a critical flaw called “Broadpwn” that will be discussed at the Black Hat security conference later this month. Identified as CVE-2017-9417, Broadpwn is a remote code execution vulnerability in the Broadcom WiFi driver. Two other Broadcom WiFi driver issues (CVE-2017-0705 and […]

Symantec announced on July 6 that it is acquiring privately-held browser security isolation vendor Fireglass. Financial terms of the deal are not being publicly disclosed. Fireglass raised $20 million in Series A venture funding in January 2016 from investors including Norwest Venture Partners, Lightspeed Venture Partners and Singtel Innov8. “Stopping malware is why we’re here […]

Mobile Ransomware Increasingly Targeting US, Kaspersky Reports Ransomware attacks are growing around the world but not at uniform rates, and they differ depending on whether the victim is on a desktop or mobile device, according to Kaspersky Lab’s “Ransomware in 2016-2017” report, which was released on June 26. Worldwide between April 2016 and March 2017, […]

Security firm Check Point today disclosed a newly discovered attack against Android devices it calls “CopyCat” that has already claimed at least 14 million victims. The Android CopyCat malware generates revenue for attackers through several mechanisms, including ad fraud and affiliate app installations. “We called it [CopyCat] because it takes credit for installations it didn’t […]

Back on May 11, President Trump signed an executive order on cyber-security, giving civilian and military agencies a 60-day deadline for reviewing cyber-security posture. As that initial deadline nears, eWEEK reached out to security experts to see what, if any impact the executive order is currently having.  “There has not been any public impact thus […]