The results of our soon-to-be-published Advanced Cloud Firewall (ACFW) test are hard to ignore. Some vendors are failing badly at the basics like SQL injection, command injection, Server-Side Request ...

Why an overlooked data entry point is creating outsized cyber risk and compliance exposure for financial institutions.

Zast.AI has raised $6 million in funding to secure code through AI agents that identify and validate software vulnerabilities ...

The new challenge for CISOs in the age of AI developers is securing code. But what does developer security awareness even ...

In the quest to get as much training data as possible, there was little effort available to vet the data to ensure that it was good.

ZAST.AI announced the completion of a $6 million Pre-A funding round led by Hillhouse Capital, bringing the company's total funding to nearly $10 million. This investment marks a significant ...

The Pakistan Telecommunication Authority (PTA) is taking a major step to secure its digital networks by launching a full-scale Cyber Security ...

There were some changes to the recently updated OWASP Top 10 list, including the addition of supply chain risks. But old ...

The DevSecOps system unifies CI/CD and built-in security scans in one platform so that teams can ship faster with fewer vulnerabilities.

CVE-2026-21525 is a denial-of-service vulnerability affecting the Windows Remote Access Connection Manager. “Exploitation is local, requires no privileges, and does not rely on user interaction,” ...

We raised $12M in a Series A round. The round was led by Standard Capital with participation from a16z, CRV, and Y Combinator. We were also lucky to have an incredible group of angel investors join, ...