Pulumi, an infrastructure as code (IaC) company, has announced several new capabilities that improve its cloud security and automation offerings. The new capabilities include rotated secrets in Pulumi ESC, a new GitHub Action, a new Role-Base Access Control (RBAC) system, and new policy as code capabilities. Secrets rotation Secrets rotation will help companies ensure that … continue reading
Cloudflare is hoping to help companies manage threats to their data, apps, and clouds from a single platform with the release of its Security Posture Management platform. The new solution provides a single view for all of their technology investments so that they can understand potential threats and respond quickly. According to the company, the … continue reading
Passkeys are quickly gaining traction as an alternative to passwords for authenticating users. Many major websites already let users sign in using them, and more are surely to follow. To learn more about the state of passkey adoption, as well as the benefits of passkeys, in the latest episode of our podcast we interviewed Andrew … continue reading
In an increasingly digital world where new cyber threats emerge almost daily, how can security teams stay ahead of cybercriminals’ next move? The key is saying goodbye to a reactive approach, and instead, adopting a proactive security strategy. Traditional, reactive security measures that most companies use today have proven ineffective when combating advanced threats, especially … continue reading
The infrastructure services provider Kyndryl has announced new secure access service edge (SASE) services that are based on Palo Alto Networks Prisma SASE solution. Palo Alto Networks’ solution integrates network and security in a unified service, providing organizations with control over user authentication and authorization and allowing secure access to business applications. Kyndryl’s offering comes … continue reading
IT teams are struggling to keep tool sprawl in check, with 48% of respondents to JumpCloud’s 8th annual SME IT Trends survey saying they use five to 10 IT management tools. Twenty-six percent of IT teams reported using more than 11 tools for IT management. Despite IT teams using many tools, 85% expressed their preference … continue reading
Companies are planning to invest more heavily in AI skills and security governance, risk, and compliance initiatives this upcoming year, according to new research from O’Reilly. The company’s Technology Trends for 2025 report analyzed data from 2.8 million users on its learning platform. The research shows significant increases in interest in various AI skills, including … continue reading
Quantum computing is no longer a dream far off in the future; it may be right around the corner. Gartner predicts that by 2029, quantum computing will advance to the point that it will render traditional cryptography unsafe. The encryption that we currently rely on to protect data is only effective because our current classic … continue reading
GitGuardian has announced a new security solution that targets Non-Human Identities (NHI), like API keys, credentials, access tokens. According to GitGuardian, NHIs outnumber human identities 50 to 1, and companies often end up with NHIs scattered across their codebases, CI/CD pipelines, and productivity tools. With GitGuardian NHI Governance, companies gain visibility into where these NHIs … continue reading
Tenable has announced the release of a new tool to help companies more quickly close vulnerability exposures. According to a recent survey from Tenable, only 9% of respondents believe that they are effective at vulnerability remediation, and only 11% believe their process is efficient. The process of identifying, testing, and installing remediation patches is also … continue reading
The security company SentinelOne has released a new AI security posture management (AI-SPM) tool that provides greater visibility into both the known and unknown uses of AI across an organization. “The power and benefits of generative AI are undeniable. Yet, the very tools and cloud services that simplify and accelerate GenAI adoption are simultaneously opening … continue reading
Microsoft’s annual development and IT conference, Microsoft Ignite, kicked off this morning, with announcements ranging from the general availability of Microsoft Security Exposure Management to the Windows Resiliency Initiative. Here is a list of some of the highlights from the event: Microsoft Security Exposure Management This new solution — now generally available — provides dynamic … continue reading