Remote Work Security: Handling Setbacks in the Time of COVID-19
Most security experts, IT workers and leaders understand that the pandemic brought a decline in business and digital safety. A big part of that is the rush to get set up at home and establish remote work security. But why, exactly? It turns out that surprising factors degraded the security of the remote workforce. Let’s…
Organizations Can Now Try Out End-to-End Encrypted Microsoft Teams Calls
First announced at the tech giant’s Ignite event in March, end-to-end encryption (E2EE) for one-to-one Teams calls is now rolling out to public preview. Organizations can take advantage of the new capability, but IT admins and users will have to manually enable it. When E2EE is used, conversations are encrypted in a way that prevents…
Customer Data Privacy Provider Skyflow Raises $45 Million
The new funding round was led by Insight Partners. Mouro Capital, MS&AD Ventures, Canvas Ventures, Foundation Capital, and Coinbase board member Gokul Rajaram also participated. Skyflow says it wants to use the new investment to further grow its sales, marketing, and engineering teams. The company plans to hire 100 new employees by the end of…
Password Auditing Tool L0phtCrack Released as Open Source
First released in 1997, L0phtCrack can be used to test password strength and recover lost Windows passwords via dictionary, brute-force, and other types of attacks. L0phtCrack was originally developed by Peiter Zatko, also known as Mudge, of the L0pht hacker think tank. L0pth then merged with @stake, which was acquired by Symantec in 2004. It…
Many Prometheus Endpoints Expose Sensitive Data
Designed to harvest real-time metrics from various endpoints, Prometheus enables organizations to keep a close eye on systems’ state, network usage, and the like. Close to 800 cloud-native platforms, including Slack and Uber, leverage the solution. In January 2021, Prometheus added support for Transport Layer Security (TLS) and basic authentication, to prevent access to the…
Private Data Sharing Firm TripleBlind Raises $24 Million in Series A Funding
The latest funding round was led by General Catalyst, with participation from Mayo Clinic, AVG Basecamp Fund, Accenture Ventures, Clocktower Technology Ventures, Dolby Family Ventures, Flyover Capital, KCRise Fund, NextGen Venture Partners, and Wavemaker Three-Sixty Health. The Kansas City, Missouri-based company provides a private data sharing solution designed to enable enterprises to collaborate with others…
Data Privacy Compliance Startup CYTRIO Launches With $3.5 Million in Funding
CYTRIO was founded by Vijay Basani (chief executive officer), Pankaj Parekh (chief privacy officer), and Darshan Joshi (chief technology officer), who collectively have 50 years of experience in data, privacy and security. Basani previously founded WebManage Technologies (acquired by NetApp), AppIQ (acquired by HP), and Cygilant. The company offers a solution that simplifies and automates…
ESET Discovers UEFI Bootkit in Cyber Espionage Campaign
The ESET discovery is the second real-world UEFI bootkit to be publicly documented in recent weeks, following Kaspersky’s report on a new Windows UEFI bootloader fitted into the FinSpy surveillance spyware product. According to ESET researchers Anton Cherepanov and Martin Smolar, the malware has evaded detection for almost a decade and was engineered to bypass…
Telecoms Giant Syniverse Discloses Years-Long Data Breach
Syniverse says it has roughly 1,250 customers across 200 countries, including a vast majority of the world’s mobile carriers, such as AT&T, Verizon, T-Mobile, Vodafone, China Mobile, Airtel, Telefónica, and América Móvil. The company’s services are used to connect the networks of different mobile carriers and enable the transmission of data. Syniverse says it enables…
Secure Data Collaboration Firm Duality Technologies Raises $30 Million
Duality Technologies says the funds will help it expand go-to-market operations, strengthen its position on the privacy-preserving segment and Privacy Enhancing Technologies (PETs), and to advance partnerships with technology vendors. The funding round was led by LG Technology Ventures. Existing investors Hearst Ventures, Intel Capital, and Team8, along with Euclidean Capital and NAventures, the corporate…
