Aggregator

OpenAI CEO Says AI Has Beaten Voice Recognition, But Experts Disagree
OpenAI CEO Sam Altman recently claimed that artificial intelligence has "fully defeated most of the ways that people authenticate currently, other than passwords." A host of security experts disagree and point out that passwords got us into this authentication mess to begin with.

Interlock Claims to Have 1.5TB of DaVita's Data as Expenses Mount
DaVita Inc., one of the largest kidney dialysis providers in the world, told regulators that an April cyberattack has cost the company $13.5 million so far and has affected more than one million people in the U.S., and counting. Interlock says it's behind the data theft and ransomware attack.

Inskit Researchers Uncover Clusters in Hungary, Saudi Arabia
Security researchers uncovered a previously unseen malware cluster associated with Israeli spyware maker Candiru. The company may have rebranded itself to evade sanctions to continue its operations. It continues to operate despite its inclusion in 2021 onto an exports blacklist by the United States.

ИК-маскировка нового поколения для военных.

“With a strong focus on CNAPP through Tenable Cloud Security and exposure management with Tenable One, Tenable provides visibility and control over hybrid attack surfaces, including on-premises, cloud, and hybrid environments,” according to the report.

To successfully tackle your cloud security challenges, you need a partner that understands the landscape and offers you a powerful, effective solution. That's why we are proud that Tenable has been positioned as a Major Player in the “IDC MarketScape: Worldwide Cloud-Native Application Protection Platform 2025 Vendor Assessment.”1. For us, this is more than just a placement on a chart; it's a validation of our commitment to helping you answer the most critical security question: "Are we exposed, and are we at risk?"

Cloud security teams are overwhelmed not only by the volume of threats but by the complexity of identifying which ones truly matter. It's no longer sufficent to know what your vulnerabilities are – you need to understand your exposure to them. For CISOs and cloud architects seeking to scale their security programs across hybrid and multicloud environments, this shift in mindset is critical.

What our customers told IDC about our CNAPP platform

The report noted: “In general, customers were pleased with the Tenable Cloud Security CNAPP solution. They commented that the CSPM capabilities are improving all the time, and the CIEM capabilities are top notch. Customers remarked about the strong collaboration and how setup and time to value were almost immediate. Others described the critical visibility it provides in protecting sensitive data and how cloud workload protection delivered as a part of Tenable Cloud Security CNAPP provides its leaders with clear, actionable insights, reducing noise and focusing on critical vulnerabilities.” 

We believe this recognition is built on the real-world value we provide to our customers every day.

The report went on to say: “The code-to-cloud capability allows security professionals to suggest changes via automatically generated pull requests, facilitating smooth communication between security and DevOps teams and speeding up remediation. In addition, the main dashboard features an 'If you only have 5 minutes' section, highlighting the five most critical risks for quick resolution. All CNAPP domains are built on a single platform, ensuring clear and consistent risk communication.” 

According to the IDC MarketScape, organizations should consider Tenable for exposure management, identity security, research-driven insights, and enhancing cloud security posture.

Beyond CNAPP: Our vision for exposure management

Our powerful CNAPP solution is a core component of the Tenable One Exposure Management Platform. Tenable One provides you with comprehensive visibility and control over your entire hybrid attack surface. Our research-driven insights are central to this vision.

Exposure management extends traditional vulnerability management by correlating risk signals across:

• Vulnerabilities
• Misconfigurations
• Identity access and entitlements
• Sensitive data exposure
• Asset context

This allows for smarter prioritization – helping security teams distinguish between "loud but low-impact" findings and those that could lead to a real breach.

By integrating the Tenable Cloud Security CNAPP with Tenable One, we bring this approach to life. By linking misconfigurations in cloud infrastructure with identity permissions and asset importance, Tenable delivers unified risk visualization that lets teams assess blast radius and business impact in real time. This is particularly vital in multicloud and hybrid environments where fragmented tools often fail to surface the most critical issues.

Beyond detection and prioritization, exposure management also provides visibility into where threats converge across teams and technologies. It creates a shared source of truth that DevOps, IAM, vulnerability management and governance, risk and compliance (GRC) teams can use to coordinate response efforts. This collaborative visibility is foundational to reducing dwell time and mitigating attack paths before they are exploited.

Why this matters to security leaders

Regulatory mandates – such as the cybersecurity disclosure rules from the U.S. Securities and Exchange Commission – are increasing accountability at the board and CISO level, so having contextualized, board-level risk metrics is no longer optional. Tenable’s platform enables role-based dashboards that quantify risk across business units, aligning cyber risk with business priorities. For CISOs, this means communicating in terms that resonate with the board while ensuring operational teams have the tools they need to act.

Additionally, exposure management supports ongoing security automation initiatives. With Tenable One’s analytics and orchestration capabilities, organizations can automate remediation workflows and incident response playbooks based on exposure severity. This leads to improved efficiency and reduced manual overhead for security teams.

Conclusion

We are honored by this recognition from the IDC MarketScape. We believe it reinforces our cloud security strategy and, most importantly, reflects the success our customers are having in securing their cloud environments.

We believe that as your cloud footprint grows, only exposure-centric cloud security solutions will scale with it. Look for platforms like Tenable’s that embed exposure management as a native function – not an afterthought bolted onto legacy vulnerability management tools.

Discover how Tenable can help you secure your cloud-native applications. Read the IDC MarketScape excerpt and contact us for a demo today.

1IDC MarketScape: Worldwide Cloud-Native Application Protection Platform 2025 Vendor Assessment, June 2025, IDC #US53549925e

“With a strong focus on CNAPP through Tenable Cloud Security and exposure management with Tenable One, Tenable provides visibility and control over hybrid attack surfaces, including on-premises, cloud, and hybrid environments,” according to the report.

To successfully tackle your cloud security challenges, you need a partner that understands the landscape and offers you a powerful, effective solution. That's why we are proud that Tenable has been positioned as a Major Player in the “IDC MarketScape: Worldwide Cloud-Native Application Protection Platform 2025 Vendor Assessment.”1. For us, this is more than just a placement on a chart; it's a validation of our commitment to helping you answer the most critical security question: "Are we exposed, and are we at risk?"

Cloud security teams are overwhelmed not only by the volume of threats but by the complexity of identifying which ones truly matter. It's no longer sufficent to know what your vulnerabilities are – you need to understand your exposure to them. For CISOs and cloud architects seeking to scale their security programs across hybrid and multicloud environments, this shift in mindset is critical.

What our customers told IDC about our CNAPP platform

The report noted: “In general, customers were pleased with the Tenable Cloud Security CNAPP solution. They commented that the CSPM capabilities are improving all the time, and the CIEM capabilities are top notch. Customers remarked about the strong collaboration and how setup and time to value were almost immediate. Others described the critical visibility it provides in protecting sensitive data and how cloud workload protection delivered as a part of Tenable Cloud Security CNAPP provides its leaders with clear, actionable insights, reducing noise and focusing on critical vulnerabilities.” 

We believe this recognition is built on the real-world value we provide to our customers every day.

The report went on to say: “The code-to-cloud capability allows security professionals to suggest changes via automatically generated pull requests, facilitating smooth communication between security and DevOps teams and speeding up remediation. In addition, the main dashboard features an 'If you only have 5 minutes' section, highlighting the five most critical risks for quick resolution. All CNAPP domains are built on a single platform, ensuring clear and consistent risk communication.” 

According to the IDC MarketScape, organizations should consider Tenable for exposure management, identity security, research-driven insights, and enhancing cloud security posture.

Beyond CNAPP: Our vision for exposure management

Our powerful CNAPP solution is a core component of the Tenable One Exposure Management Platform. Tenable One provides you with comprehensive visibility and control over your entire hybrid attack surface. Our research-driven insights are central to this vision.

Exposure management extends traditional vulnerability management by correlating risk signals across:

• Vulnerabilities
• Misconfigurations
• Identity access and entitlements
• Sensitive data exposure
• Asset context

This allows for smarter prioritization – helping security teams distinguish between "loud but low-impact" findings and those that could lead to a real breach.

By integrating the Tenable Cloud Security CNAPP with Tenable One, we bring this approach to life. By linking misconfigurations in cloud infrastructure with identity permissions and asset importance, Tenable delivers unified risk visualization that lets teams assess blast radius and business impact in real time. This is particularly vital in multicloud and hybrid environments where fragmented tools often fail to surface the most critical issues.

Beyond detection and prioritization, exposure management also provides visibility into where threats converge across teams and technologies. It creates a shared source of truth that DevOps, IAM, vulnerability management and governance, risk and compliance (GRC) teams can use to coordinate response efforts. This collaborative visibility is foundational to reducing dwell time and mitigating attack paths before they are exploited.

Why this matters to security leaders

Regulatory mandates – such as the cybersecurity disclosure rules from the U.S. Securities and Exchange Commission – are increasing accountability at the board and CISO level, so having contextualized, board-level risk metrics is no longer optional. Tenable’s platform enables role-based dashboards that quantify risk across business units, aligning cyber risk with business priorities. For CISOs, this means communicating in terms that resonate with the board while ensuring operational teams have the tools they need to act.

Additionally, exposure management supports ongoing security automation initiatives. With Tenable One’s analytics and orchestration capabilities, organizations can automate remediation workflows and incident response playbooks based on exposure severity. This leads to improved efficiency and reduced manual overhead for security teams.

Conclusion

We are honored by this recognition from the IDC MarketScape. We believe it reinforces our cloud security strategy and, most importantly, reflects the success our customers are having in securing their cloud environments.

We believe that as your cloud footprint grows, only exposure-centric cloud security solutions will scale with it. Look for platforms like Tenable’s that embed exposure management as a native function – not an afterthought bolted onto legacy vulnerability management tools.

Discover how Tenable can help you secure your cloud-native applications. Read the IDC MarketScape excerpt and contact us for a demo today.

1IDC MarketScape: Worldwide Cloud-Native Application Protection Platform 2025 Vendor Assessment, June 2025, IDC #US53549925e

The post We’re a Major Player in the 2025 IDC MarketScape for CNAPP. Here’s Why That Matters for Your Cloud Security. appeared first on Security Boulevard.

During the 12-day conflict between Israel and Iran in June 2025, a sophisticated network of Iranian-linked cyber threat actors launched coordinated digital operations against critical infrastructure sectors worldwide. The campaign demonstrated unprecedented coordination between military operations and state-sponsored cyberattacks, targeting financial institutions, government agencies, and media organizations across multiple countries. The cyber offensive involved a […]

The post IRGC Hacker Groups Attacking Targeted Financial, Government, and Media Organizations appeared first on Cyber Security News.

华为乾崑出手，联合一汽奥迪让燃油车实现「油电同智」。

2025 年，辅助驾驶竞争的主线就是 VLA。

CyberStrikeLab企业级内网实战靶场

Генеративный ИИ создал летающий командный центр.

In a sophisticated campaign first observed in October 2024, attackers have begun leveraging a legitimate driver to disable antivirus software across compromised networks. By abusing the ThrottleStop.sys driver—originally designed by TechPowerUp to manage CPU throttling—the malware gains kernel‐level memory access to terminate security processes at will. Initial access is most often achieved through stolen RDP […]

The post Hackers Use Legitimate Drivers to Kill Antivirus Processes and Lower The System’s Defenses appeared first on Cyber Security News.

Один звонок — и хакеры уже внутри. CRM упала первой.

Organizations with on-premises Microsoft Exchange servers are being urged to take steps to reduce exposure to a vulnerability recently reported by a researcher.

CISA released ten Industrial Control Systems (ICS) advisories on August 7, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-25-219-01 Delta Electronics DIAView
• ICSA-25-219-02 Johnson Controls FX80 and FX90
• ICSA-25-219-03 Burk Technology ARC Solo
• ICSA-25-219-04 Rockwell Automation Arena
• ICSA-25-219-05 Packet Power EMX and EG
• ICSA-25-219-06 Dreame Technology iOS and Android Mobile Applications
• ICSA-25-219-07 EG4 Electronics EG4 Inverters
• ICSA-25-219-08 Yealink IP Phones and RPS (Redirect and Provisioning Service)
   
• ICSA-25-148-04 Instantel Micromate (Update A)
• ICSA-25-140-04 Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update A)

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.

Today, CISA issued Emergency Directive (ED) 25-02: Mitigate Microsoft Exchange Vulnerability in response to CVE-2025-53786, a vulnerability in Microsoft Exchange server hybrid deployments.  

ED 25-02 directs all Federal Civilian Executive Branch (FCEB) agencies with Microsoft Exchange hybrid environments to implement required mitigations by 9:00 AM EDT on Monday, August 11, 2025. 

This vulnerability presents significant risk to all organizations operating Microsoft Exchange hybrid-joined configurations that have not yet implemented the April 2025 patch guidance.

Although this directive is only for FCEB agencies, CISA strongly encourages all organizations to address this vulnerability. For additional details, see CISA’s Alert: Microsoft Releases Guidance on Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments.

Software license non-compliance can carry steep penalties, and breaking service level agreements (SLAs) can also be costly.

The post Software License Non-Compliance Is Expensive appeared first on Azul | Better Java Performance, Superior Java Support.

The post Software License Non-Compliance Is Expensive appeared first on Security Boulevard.

Bouygues Telecom, a large French mobile carrier, disclosed a cyberattack and data breach affecting more than 6 million customer accounts.

The founders of the Samourai Wallet (Samourai) cryptocurrency mixer have pleaded guilty to laundering over $200 million for criminals. [...]