Jeff Schwartz

Minimal, Hardened & Updated Daily: The New Standard for Secure Containers Chainguard provides DevSecOps teams with a library of "secure-by-default" container images so that they don't have to worry about software supply chain vulnerabilities. The startup is expanding its fo...

Chainguard is among the fastest-growing cybersecurity unicorns. Co-founder and CEO Dan Lorenc and newly appointed CISO Quincy Castro share their ambitious roadmap to expand its secure-by-default libraries to include Python, Java and a new Linux distro.

LevelBlue Acquires Trustwave, Forms World's Largest Independent MSSP As the largest managed security services provider, the combined entity will offer cyber consulting, managed detection and response, and incident response services.

LevelBlue, the cybersecurity services business spun out of AT&T last year, announced on Tuesday that it has agreed to acquire Trustwave from The Chertoff Group-sponsored MC2 Security Fund for an undisclosed amount.

IBM Pushes for More Collaboration Between Security, Governance IBM is integrating its governance and AI security tools to address the risks associated with the AI adoption boom.

IBM has plans to integrate its watsonx.governance and Guardium AI Security offerings to help organizations integrate artificial intelligence (AI) into their daily operations and to get security and governance teams on the same page.

Securonix Acquires Threat Intelligence Firm ThreatQuotient The deal will combine Securonix's security information and event management (SIEM) platform with ThreatQuotient's threat detection and incident response (TDIR) offering to build an all-in-one security...

SIEM platform provider Securonix has acquired ThreatQuotient
to strengthen its breach detection and incident and response capabilities.

Tenable to Acquire AI Security Startup Apex Apex will enhance Tenable's AI Aware tool by mitigating the threats of AI applications and tools not governed by organizations, while enforcing existing security policies.

Apex Security will enhance Tenable's AI Aware by mitigating the threats and risks it finds, establishing best practices for AI security, and enforcing existing security policies.

Microsoft Readies Administrator Protection Option for Windows 11 Microsoft's David Weston describes the new feature as the most significant architectural Windows security change in a generation.

Microsoft's David Weston describes the new Administrator Protection feature it plans to roll out as the most significant architectural Windows security change in a generation. www.darkreading.com/endpoint-sec...

Cisco Boosts XDR Platform, Splunk With Agentic AI Cisco joins the agentic AI wave with the introduction of advanced LLMs to autonomously verify and investigate attacks.

Among the new security capabilities that use agentic AI announced by Cisco at the RSA conference this week
Instant Attack Verification uses agentic AI to initiate and process incident investigations autonomously.

Palo Alto Networks has begun rolling out Cortex Cloud, the outgrowth of its efforts to provide a unified cloud security platform with automation and real-time detection and response capabilities for security operations centers (SOCs). www.darkreading.com/cloud-securi...

Google Brings End-to-End Encryption to Gmail The new Google Workspace features will make it easier for enterprise customers to implement end-to-end encryption within Gmail.

New Google Workspace features will make it easier for enterprise customers to implement end-to-end encryption within Gmail.

Microsoft Gives Security Copilot Some Autonomy New agentic AI capabilities in Microsoft Security Copilot will allow agents to triage threats and provide recommendations.

Microsoft is adding agentic AI capabilities to its Security Copilot, enabling the digital assistant to offload and automate specific processes now performed by security teams, such as triaging phishing alerts and vetting and remediating threats.

HP Brings Quantum-Safe Encryption to Printers Starting this fall, HP's 8000 Series enterprise and commercial printers, which include Color LaserJet Enterprise MFP 8801, Mono MFP 8601, and LaserJet Pro Mono SFP 8501, will feature new quantum ASICs...

HP previewed enterprise and professional-grade printers resistant to quantum attacks at the company's annual Amplify partner conference in Nashville, Tenn. this week. The upgraded versions of the printers, which support the NIST PQC standards approved last year, are slated to arrive this fall.

F5 Integrates API Security and Networking to Address AI Onslaught The new The F5 Application Delivery Controller and Security Platform combines BIG-IP, NGNIX and Distributed Cloud Services and new AI Gateway and AI Assistants.

At F5 AppWorld, the F5 Application Delivery Controller and Security Platform was launched. It combines BIG-IP, NGINX and Distributed Cloud Services and new AI Gateway and AI Assistants.

Armis Acquires Otorio to Expand OT Exposure Management Platform Armis will integrate Otorio's Titan platform with its cloud-based Centrix, bringing an on-premises option to the cloud-only offering.

Operational technology (OT) exposure management provider Armis has acquired OTORIO.

Google Adds Quantum-Resistant Digital Signatures to Cloud KMS The new Cloud Key Management Service is part of Google’s new roadmap for implementing the new NIST-based post-quantum cryptography (PQC) standards.

Google revealed its roadmap for implementing the National Institute for Science and Technology Standards’ (NIST’s) new post-quantum cryptography (PQC) standards with the addition of quantum-resistant digital signature support to its Cloud Key Management Service (KMS).

Tenable to Acquire Vulcan Cyber to Boost Exposure Management Focus The deal, expected to close this quarter, will give Tenable One Exposure Management much-needed integration with over 100 third-party security tools and platforms.

Tenable is poised to fill significant gaps in its exposure management platform with its agreement to acquire Vulcan Cyber.

CrowdStrike Highlights Magnitude of Insider Risk The impetus for CrowdStrike's new professional services came from last year's Famous Chollima threat actors, which used fake IT workers to infiltrate organizations and steal data.

A spike in activity by the group, known as Famous Chollima, was the impetus for the launch of CrowdStrike's Insider Risk Service, a set of professional services for detecting rogue IT workers and improving hiring practices. www.darkreading.com/insider-thre...

Cisco Previews AI Defenses to Cloud Security Platform Set for release in March, Cisco AI Defense will provide algorithmic red teaming of large language models with technology that came over as part of the Robust Intelligence acquisition last year.

Cisco AI Defense, a new offering that will be available in March, was introduced last week. It is designed to provide automated model verification at that scale. www.darkreading.com/cloud-securi...

1Password's Trelica Buy Part of Broader Shadow IT Play The acquisition accelerates 1Password's ongoing efforts to expand the role of the password manager with secure SaaS management.

1Password has acquired software-as-a-service (SaaS) access management provider Trelica -- the latest move in a race to broaden the scope and functionality of password managers beyond securely storing user credentials.
www.darkreading.com/identity-acc...

Whatever holiday you celebrate, may it be merry and happy!

Mastercard Boosts AI Security With Recorded Future Deal Mastercard rep says the $2.65 billion deal for the leading threat intelligence provider will boost Mastercard's AI-based cybersecurity capabilities.

Mastercard closed its $2.65 billion acquisition of Recorded Future.

Vendors Chase Potential of Non-Human Identity Management Non-human identities authenticate machine-to-machine communication. The big challenge now is to secure their elements and processes — before attackers can intercept.

Numerous startups have emerged focused on non-human identity (NHI) security including Astrix Security, GitGuardian, Aembit, Oasis Security and Entro Security.

"A year ago, the term NHI did not exist, and now everyone is talking about them," says Astrix co-founder and CEO Alon Jackson.

Microsoft Boosts Device Security With Windows Resiliency Initiative Microsoft is readying a new release of Windows in 2025 that will have significant security controls, such as more resilient drivers and a "self-defending" operating system kernel.

Microsoft is planning some major changes to #Windows in 2025. David Weston-- @dwizzzle.bsky.social Microsoft's vice president of enterprise and OS security, outlined the company's new Windows Security Initiative at last month’s Microsoft Ignite conference. www.darkreading.com/endpoint-sec...

Microsoft Highlights Security Exposure Management at Ignite Building on its broad security portfolio, Microsoft's new exposure management is now available in the Microsoft Defender portal, with third-party-connectors on the way.

Microsoft is the latest big name to add continuous threat exposure management (CTEM) to its formidable security portfolio with the release of its new Microsoft Security Exposure Management offering. Microsoft made the announcement at its annual Microsoft Ignite conference, held this week in Chicago.

CrowdStrike Spends to Boost Identity Threat Detection Adaptive Shield is the third security posture management provider it's acquired in the last 14 months as identity-based attacks continue to rise.

CrowdStrike's spending spree for security posture management capabilities continued with a deal to buy Adaptive Shield, an Israeli startup that specializes in securing organizations' software-as-a-service (SaaS) ecosystems and protecting against identity-based attacks.