Enterprise Security Tech

Silicon Valley’s API security specialist Cequence Security yesterday made official what had been quietly gaining momentum: the full launch and expansion of its Partner Program, underscoring the company’s deliberate transition to a channel-only business model. With a striking metric — 74 % of its net-new revenue already coming through partners — Cequence is positioning itself as one of the few players in the API-security and bot-management landscape to lean entirely on a par

As software supply chain threats continue to evolve from nuisance to existential risk, Chainguard is doubling down on its mission to make open source dependencies verifiably safe. The company today announced the general availability of Chainguard Libraries for Python , a new class of trusted, continuously verified open source builds that now includes built-in CVE remediation — giving developers a way to stay secure without constantly chasing version upgrades. Securing the S

In an era when security teams are drowning in alerts but starving for context, Axonius is aiming to shift the paradigm from visibility to meaningful action. Today, the asset-intelligence specialist introduced Axonius AI™ , an operational artificial-intelligence engine anchored in its flagship platform, the Axonius Asset Cloud™, and rolled out significantly expanded capabilities — including the newly packaged Axonius for Healthcare™, targeting hospital and clinical environmen

In a move that underscores the growing convergence of identity, endpoint, and cloud threat intelligence, Saviynt and CrowdStrike today announced a deep integration between Saviynt’s identity-governance platform and the CrowdStrike Falcon® security stack. The new connector—now listed on the CrowdStrike Marketplace—binds endpoint, identity and cloud telemetry from CrowdStrike with Saviynt’s access-governance logic, enabling bi-directional flows of data for real-time risk redu

A previously undisclosed campaign of cyberespionage is now coming into sharper view, leveraging the zero-day vulnerability known as CVE‑2025‑53770—nicknamed “ToolShell”—to infiltrate a diverse range of targets spanning the Middle East, Africa, South America and the United States. The operation is marked by sophisticated chaining of publicly-known flaws, living-off-the-land tools, and covert backdoors, underscoring a troubling trend of rapid exploitation and cross-regional rea

On October 20 2025, the security research team at JFrog Security Research published a disclosure of multiple vulnerabilities in the open-source package oatpp‑mcp—an implementation of the Model Context Protocol (MCP) standard produced by Anthropic. The most critical of these is logged as CVE‑2025‑6515, and JFrog’s researchers have coined the attack technique enabled by this flaw “Prompt Hijacking.” What’s the Protocol Here—and Why It’s Vulnerable MCP is designed to let large-