TL;DR we raised a lot of money and we’re ready to go big. We've raised $17M to bring “no BS” security to devs. We’re happy to welcome Henri Tilloy from Singular.vc on board, who is again joined by Notion Capital and Connect Ventures. This round comes just 6 months after we raised $5.3M in seed funding. That’s fast.

Do you know almost 88% of companies experience unplanned outages due to expired certificates? Given these big numbers, ensuring the safety and reliability of software with code-signing certificates is vital. However, when a code signing certificate is compromised, it can pose significant risks that can undermine the trustworthiness of software distributed to users. In this blog, we are going to discuss all those risks and challenges, along with some tips on how to overcome them. Let’s begin!

Snapchat is a mobile-based social media platform owned by Snap Inc.; it is a global platform, hosting over 734.8 million users, the majority of which are Gen Z. The platform began as a resource for sharing pictures between friends but has evolved to include options for creator content, group conversations, and the sharing of media. As Snapchat’s audience continues to grow, so too, do the threats those members face.

Ever happened – you clicked a random link by mistake but discovered your system working strangely? Maybe some programs crash, data goes missing, or pop-ups plague your screen. It could be a malicious threat within your system, or simply, your system is the victim of a DLL Hijacking. DLL Hijacking is a type of cyberattack that allows the attacker to steal your data or even take control of your system.

In an age where manufacturers have decided that just about every device needs to be “smart,” it’s becoming difficult to avoid the data collection and privacy invasion that are often baked into these devices. We have come to expect that smart phones and speakers with built-in digital assistants are always listening, and data collection practices between companies can vary significantly.

Several companies running their workloads on VMware ESXi servers were attacked by the hacking group SEXi. They developed ransomware called SEXi to encrypt VMware ESXi servers, virtual machines, and backups. SEXi = ESXi – quite an interesting name, isn’t it? It points directly to ESXi.

In the realm of modern enterprise productivity suites, Copilot for Microsoft 365 stands as a huge driver for efficiency, offering business users the ability to aggregate, summarize, and process data within the M365 suite of tools. However, for organizations with diverse infrastructure and applications, and the need for real-time data interactions, the out-of-the-box functionality requires augmentation to reach its full potential, not to mention secure controls for Copilot for M365.

EO 14028 is bringing a lot of new security documentation requirements with it. Here's how SCA can help with creating that documentation.

There’s a seemingly endless list of cybersecurity threats facing organisations today. Among these threats, typosquatting stands out as a deceptive practice used by threat actors to exploit user errors in typing website addresses. To combat this growing menace, asset discovery tools play a crucial role in identifying and mitigating the risks associated with malicious typosquatting domains.