
Shining A Light on Shadow IT
New Shadow IT Finder Helps Orgs Find the Unknowns Behind 1 in 3 Breaches You can’t protect what you don’t know about. With the transition
Randori and IBM Plan to Join Forces to Tackle Growing Attack Surface Risks
New Shadow IT Finder Helps Orgs Find the Unknowns Behind 1 in 3 Breaches You can’t protect what you don’t know about. With the transition
A solid attack surface management (ASM) program can improve resiliency, instill trust, and reduce exposures by providing security operations teams with a continuous and ongoing
I am super excited to announce that I am joining offensive security company Randori as Chief Strategy Officer. To understand why I joined Randori, it’s
After a very tumultuous year in cybersecurity, including the Solarwinds hack and numerous ransomware and supply chain attacks, Randori set out to understand the ongoing
The risk of ransomware to businesses is growing faster than ever — attacks have surged more than 700% and morphed into a $20B a year
On October 5, 2021, the Apache Software Foundation provided an update that patched CVE-2021-41773. This vulnerability is a path normalization issue that can be leveraged
As business dependence on digital technology has increased during the pandemic, CISOs and their teams are working overtime. Recent studies suggest the majority of security
On September 21, 2021, VMware released VMSA-2021-0020 detailing information on 19 vulnerabilities affecting vCenter Server. Some of these can be exploited independently, or in conjunction,
Nothing is Made Better By Ignorance Having spent close to a decade in cybersecurity, there are certain things that seem to be universally true, regardless
The US Securities and Exchange Commission’s Division of Examinations (DoE), formerly the Office of Compliance Inspections & Examinations (“OCIE”) is the second largest department of
Security or Serendipity? When Tenet finally rolled into theaters in September 2020, you probably didn’t expect it to contain a pretty poignant lesson about cybersecurity
A 9.8-criticality CVE was recently discovered in Atlassian’s Confluence server that sent many information security professionals scrambling over the Labor day weekend. This CVE is