Enterprise Security Tech

As software supply chain threats continue to evolve from nuisance to existential risk, Chainguard is doubling down on its mission to make open source dependencies verifiably safe. The company today announced the general availability of Chainguard Libraries for Python , a new class of trusted, continuously verified open source builds that now includes built-in CVE remediation  — giving developers a way to stay secure without constantly chasing version upgrades. Securing the S

In an era when security teams are drowning in alerts but starving for context, Axonius is aiming to shift the paradigm from visibility to meaningful action. Today, the asset-intelligence specialist introduced Axonius AI™ , an operational artificial-intelligence engine anchored in its flagship platform, the Axonius Asset Cloud™, and rolled out significantly expanded capabilities — including the newly packaged Axonius for Healthcare™, targeting hospital and clinical environmen

In a move that underscores the growing convergence of identity, endpoint, and cloud threat intelligence, Saviynt and CrowdStrike today announced a deep integration between Saviynt’s identity-governance platform and the CrowdStrike Falcon® security stack. The new connector—now listed on the CrowdStrike Marketplace—binds endpoint, identity and cloud telemetry from CrowdStrike with Saviynt’s access-governance logic, enabling bi-directional flows of data for real-time risk redu

In what security researchers are describing as a watershed moment for developer supply-chain attacks, a new malware campaign dubbed GlassWorm  has begun spreading through extensions for Visual Studio Code (VS Code) and its open-source alternative, OpenVSX. The worm-like code has been installed on an estimated 35,800 developer machines so far. What happened: A stealthy worm enters the IDE According to analysts at Koi Security, the campaign first surfaced on October 17, 2025 wh

In an era when geopolitics, regulation and innovation are colliding at high velocity, enterprises are sounding the alarm on a new breed of risk—one in which trade policy, state-sponsored cyber threats and under-governed artificial intelligence are converging to create a complex danger zone. According to the Riskonnect 2025 New Generation of Risk Report , a global survey of over 200 risk, compliance and resilience professionals reveals that traditional risk playbooks may be f

Microsoft’s support for Windows 10 officially ended last week on October 14 , but for millions of systems worldwide, that deadline has come and gone with business still as usual — and that’s the problem. Nearly a decade after its 2015 debut, Windows 10 has finally entered the post-support void. Microsoft is no longer issuing free updates, security patches, or bug fixes, and that has left an estimated 5.25 percent of all workloads  still running the operating system exposed, a