From SecurityWeek · 11 stories
Operational Technology Security Faces Unique Challenges in Vulnerability Management
Operational Technology (OT) security presents distinct challenges compared to IT security, especially in vulnerability management processes. This difference arises from the traditional design of OT systems, which often lack modern security features and focus primarily on denial of service (DoS) impacts rather than remote code execution.
Shift Towards Business-Aligned Risk Management in Risk Assessment
Organizations are moving toward a business-aligned approach to risk management. This shift integrates risk assessments with operational disruptions that could lead to financial loss, enhancing decision-making effectiveness.
River Bank Confirms Stolen Data Deleted After Ransomware Attack
River Financial Corporation confirmed that data stolen during a June 16 ransomware attack was deleted by the threat actor. The company engaged with the hackers to ensure data deletion, likely involving a ransom payment, but has not confirmed if personal information was exfiltrated or the attack's material impact.
Balance Theory Raises $19 Million in Series A Funding for Cybersecurity Investment Platform
Balance Theory, a cybersecurity investment management startup, secured $19 million in Series A funding. This funding will expand its platform, which helps CISOs manage security spending by integrating planning, market intelligence, and execution into a single system.
Cantina Exits Stealth with $8 Million Funding for Autonomous Vulnerability Management
Cybersecurity startup Cantina has emerged from stealth mode, announcing $8 million in new funding, bringing its total raised to $16.5 million. The company offers an autonomous security platform that uses AI agents to identify, prioritize, and remediate software vulnerabilities. This development introduces another player in the evolving field of AI-driven cybersecurity solutions.
OT Security Startup Frenos Raises $1.52 Million in Seed Round Extension
Frenos, an AI-native operational technology (OT) security startup, secured an additional $1.52 million in a seed funding round extension, bringing its total raised to $6.4 million. This funding will support the expansion of its customer success team and AI research and development, and coincides with the launch of its SAIRA Co-Work AI reasoning agent.
Abstract Security Raises $25 Million to Expand Composable Security Operations Platform
Abstract Security secured $25 million in a new funding round, bringing its total funding to nearly $50 million, to advance its streaming-first security operations platform. This investment will be used to enhance in-stream detection, expand workflow capabilities, and grow its go-to-market team, impacting the development of composable security solutions.
Marcus Hutchins Discusses His Journey From WannaCry Hero to FBI Arrest
Marcus Hutchins, known for stopping the WannaCry ransomware in 2017, shared his perspective on his past activities and subsequent arrest by the FBI. He described his motivation as an intense desire to understand how systems work, rather than to change them.
AI Compliance Frameworks Lead to Ineffective Questionnaires, Not Real Failure Detection
Current AI compliance frameworks, despite their overlap, are being translated into questionnaires that fail to effectively assess real risks. These questionnaires often rely on prose-based answers rather than verifiable evidence, making it difficult to distinguish between mature programs and those with good technical writers. This approach hinders genuine compliance and risk reduction in AI systems.
Russ Kirby Discusses Career Path and Role as CISO at Ping Identity
Russ Kirby, CISO at Ping Identity, shared insights into his career progression in cybersecurity, attributing his success to a natural inclination for order and protection. He discussed his journey from general technology roles to CISO positions at Creditsafe, ForgeRock, and now Ping Identity, emphasizing how opportunities aligned with his personality and interests.
Podcast features Edna Conway on cybersecurity, governance, AI, and supply chain resilience
A podcast episode features cybersecurity expert Edna Conway discussing governance challenges, AI advancements, and supply chain resilience. The discussion provides strategic perspectives for organizations navigating rapid technological change in cybersecurity.