BayPay Members Blogs

This additional resource is sponsored by The BayPay Forum.

Cloud Visibility Firm Orca Security Emerges From Stealth Mode

Orca Security
view counter
Israel-based cloud visibility solutions provider Orca Security on Wednesday emerged from stealth mode with $6.5 million in seed funding from YL Ventures. The Orca Cloud Visibility Platform leverages patent-pending technology named...
Continue reading
  0 Comments
0 Comments

Senators Question FBI on Russian Hack of Voting Firm

view counter
Two U.S. senators asked the FBI on Wednesday to explain what it has done to investigate the suspected hack by Russian intelligence of a Florida-based voting software company before the 2016...
Continue reading
  0 Comments
0 Comments

Telegram Hit by Cyber-attack, CEO Points to HK Protests, China

view counter
Encrypted messaging service Telegram suffered a major cyber-attack that appeared to originate from China, the company's CEO said Thursday, linking it to the ongoing political unrest in Hong Kong. Many protesters...
Continue reading
  0 Comments
0 Comments

Microsoft Patches Critical Vulnerabilities in NTLM

view counter
Microsoft on Tuesday released security patches for nearly 90 vulnerabilities , including two Critical bugs impacting the proprietary authentication protocol NTLM.  Tracked as CVE-2019-1040 and CVE-2019-1019, the two security issues consist...
Continue reading
  0 Comments
0 Comments

How Insecurity Can Bolster Your Security Program

view counter
Insecurity Can Help Organizations Continually Learn and Make Changes It’s always better to deal with issues in an orderly and strategic manner, long before they become a crisis.  Unfortunately, many organizations...
Continue reading
  0 Comments
0 Comments

Email Security Firm Vade Secure Raises $80 Million

view counter
Email-focused cybersecurity firm Vade Secure has agreed to a €70 million (approximately US$79.3 million) investment by venture capital firm General Catalyst.  The company provides what it calls “predictive email defense” and...
Continue reading
  0 Comments
0 Comments

Awareness Training Firm CybeReady Opens U.S. Office With $5 Million Funding

view counter
Following four years of self-funded fine-tuning in Europe, start-up security awareness firm CybeReady has expanded into the U.S. market with an initial funding round of $5 million led by Baseline Ventures....
Continue reading
  0 Comments
0 Comments

Flaw in Evernote Extension Allows Hackers to Steal Data

view counter
A vulnerability identified by researchers in a popular Evernote extension for Chrome can be exploited by hackers to steal sensitive information from the websites accessed by a user. The research team...
Continue reading
  0 Comments
0 Comments

Microsoft Patches Privilege Escalation Flaws Disclosed by 'SandboxEscaper'

view counter
Microsoft’s Patch Tuesday updates for June 2019 resolve nearly 90 vulnerabilities, including the privilege escalation flaws disclosed recently by a researcher known as SandboxEscaper. Over the past year, SandboxEscaper has identified...
Continue reading
  0 Comments
0 Comments

Facebook Launching App That Pays Users for Data on App Usage

view counter
Facebook on Tuesday launched an app that will pay users to share information with the social media giant about which apps they’re using. The company previously rolled out two similar apps...
Continue reading
  0 Comments
0 Comments

Radiohead Defies Hackers, Releases Trove of Stolen Music

view counter
Alternative rock legends Radiohead on Tuesday released an 18-hour trove of private recordings from their 1997 album "OK Computer" after getting hacked by someone seeking a ransom of $150,000 for the...
Continue reading
  0 Comments
0 Comments

New RAMBleed Attack Allows Access to Sensitive Data in Memory

RAMBleed
view counter
New DRAM Side-Channel Attack ‘RAMBleed’ Allows Hackers to Steal Sensitive Data A team of researchers representing several universities has disclosed the details of RAMBleed, a new type of side-channel attack on...
Continue reading
  0 Comments
0 Comments

Microsegmentation Firm Edgewise Networks Raises $11 Million

Edgewise Networks Logo
view counter
Microsegmentation provider Edgewise Networks today announced that it has secured $11 million in new funding. The company has raised $18 million to date. Founded in 2016, Edgewise is focused on protecting...
Continue reading
  0 Comments
0 Comments

New Version of ShellTea Backdoor Used by FIN8 Hacking Group

view counter
Researchers have detected a new campaign against the hotel-entertainment industry employing the first documented use of the ShellTea/PunchBuggy backdoor since 2017. It is also thought to be the first observed attack...
Continue reading
  0 Comments
0 Comments

FBI Warns of HTTPS Abuse in Phishing Campaigns

view counter
Malicious actors are abusing users’ trust in the HTTPS protocol to launch phishing campaigns, the Federal Bureau of Investigation (FBI) warns in a recent alert.  For years, tech companies have been...
Continue reading
  0 Comments
0 Comments

Microsoft Pushing for a Passwordless Windows 10

view counter
Microsoft wants to make its Windows platform passwordless and the latest Windows 10 release marks one step closer to that goal.  Passwords have been long said to represent a security issue...
Continue reading
  0 Comments
0 Comments

Adobe Patches Code Execution Flaws in Flash, ColdFusion, Campaign

view counter
Adobe’s June 2019 Patch Tuesday updates address several critical arbitrary code execution vulnerabilities affecting the company’s Flash Player, ColdFusion and Campaign products. In the ColdFusion web application development platform, which has...
Continue reading
  0 Comments
0 Comments

The Symbiosis Between Public Cloud and MSSPs

view counter
To the surprise of many, public cloud appears to be driving a renaissance in adoption and advancement of managed security service providers (MSSP). For several years, the major public cloud providers...
Continue reading
  0 Comments
0 Comments

Tool Links Internet-Exposed ICS to Google Street View

Kamerka finds exposed ICS
view counter
An open source tool named Kamerka allows users to generate a map of Internet-exposed industrial control systems (ICS) in a specified country and link results to Google Street View. Launched in...
Continue reading
  0 Comments
0 Comments

Artificial Intelligence Threat Detection Firm Vectra Raises $100 Million

Vectra AI Logo
view counter
San Jose, Calif-based network threat detection and response firm Vectra has closed a $100 million Series E funding round led by TCV and supported by existing investors. This brings the total...
Continue reading
  0 Comments
0 Comments