GoKawiil
Tech News
At ISC2 Strategic Congress 2026 in Denver, former CISO Lora Vaughn, now founder of The Vaughn Group consultancy, presented a simplified threat-modeling approach built around four whiteboard questions rather than lengthy formal reports. She said the method works across organizations of any size, from the NSA to small businesses, and can guide security investment decisions.
Cloud security startup Upwind closed a $400 million Series C led by Bessemer Venture Partners at a $3.8 billion valuation, with Greylock Partners and Craft Ventures also participating. The round nearly collapsed after Datadog offered to acquire Upwind but declined to pay above the valuation VCs had already set, prompting Upwind to stay independent instead.
Amazon reported it detected hackers attempting to exploit two vulnerabilities in the PHP programming language four days before the flaws were publicly disclosed, and said exploitation is now widespread. The US NSA and UK authorities separately warned organizations running PHP to patch immediately or take systems offline, and PHP's maintainers have released fixes. The bugs reportedly went undetected for more than a decade and were found with help from OpenAI and Google AI models.
PingCAP, maker of the TiDB database used by companies including Atlassian, Square and Pinterest, disclosed on Oct. 19 that attackers had accessed its internal systems from Sept. 9 to Oct. 7 using stolen service account credentials. A group calling itself FulcrumSec, which has previously listed targets such as LexisNexis, Novo Nordisk and Manchester Airports Group on its leak site, is said to have copied internal data and source code during that period. PingCAP's third-party investigation found no evidence attackers ran malicious commands or kept persistent access, and the company did not respond to a request for comment.
A Cloud Security Alliance survey conducted with Jazz found that 73% of organizations experienced at least one confirmed data loss incident in the past two years, and only 16% said their DLP tools blocked the most serious incident before data left the organization. The survey also found that while nearly half of security teams rank GenAI tools as their top exfiltration risk, fewer than a third can produce routine reports showing sensitive data sent to such tools, and only 22% strictly block GenAI-related data transfers.
Model APIs made credentials directly spendable. A key in the wrong place is no longer just an access problem, it is an invoice, and the charges arrive before the alert does.
The IEEE Computer Society published commentary arguing that cloud security architectures need to go beyond blocking unauthorized access. It states that systems must also be able to clearly demonstrate how access decisions were made, in order to satisfy regulators and investigators.
Security researchers warn that attackers can gain lasting access to SaaS and cloud accounts simply by tricking a logged-in user into approving a malicious OAuth application, sidestepping passwords, malware, and multifactor authentication entirely. Once granted, these app permissions can let attackers read email, browse files, pull source code, or touch CI/CD systems through legitimate API access until the tokens or grants are revoked.
A virtual event titled Cybersecurity Outlook 2027 will bring together industry analysts, researchers and experts to discuss emerging cyber threats from criminals and nation-states as the new year approaches. The sessions will also cover how AI-driven tools and other technologies can help organizations protect multi-cloud and hybrid environments.
Zscaler reported fiscal fourth-quarter adjusted earnings of $1.19 per share on revenue of $898 million, topping Wall Street forecasts of $1.09 and $877 million respectively. Revenue climbed 25% year-over-year, and annual recurring revenue reached $3.77 billion, while the company's net loss narrowed to $3.4 million from $17.6 million a year earlier. CEO Jay Chaudhry credited demand for the company's Zero Trust cloud security architecture, including a new version built for AI agents, for the strong results.
Pharmaceutical distributor McKesson confirmed hackers broke into several cloud-hosted accounts and stole data tied to its oncology and medical-surgical units. The ShinyHunters group told TechCrunch it used phishing and social engineering to trick employees into granting access, then pulled millions of rows of patient records from Snowflake and Salesforce environments, including names, Social Security numbers, diagnoses, medications, and employee home addresses.