510 press releases in English indexed under cybersecurity.
New global study finds as AI adoption accelerates, 75.5% of organizations still don't fully trust AI-powered remediation without human review BURLINGTON, Mass., October 15, 2026--N-able , Inc. (NYSE: NABL), a global cybersecurity company delivering end-to-end business resilience, today released "The A
Every stolen laptop, leaked database, and ransomware demand pushes organizations toward the same fix. That demand has built the Encryption Software Market into a USD [read full press release...]
Edelson Lechtzin LLP is investigating data privacy claims arising from a reported data breach involving National Insurance Company and Squire Patton Boggs
Edelson Lechtzin LLP, a national class action law firm, is investigating data privacy claims arising from a reported data breach at JM Bullion Inc.
Credentials often start in an engineer's local dev environments, then get copied into unscoped CI/CD variables to keep pipelines running. Stored there as a raw value rather than a reference to a scoped secret, a signing key reaches every job in the pipeline — compromised or not. Standing up a standalone vault narrows that exposure but requires mirroring every change to project membership, protected branches, and production environments. When the vault falls out of sync, a pipeline breaks or an agent’s service account keeps access it no longer needs. GitLab Secrets Manager tightens credential security without a second permission model. It is now generally available in GitLab 19.5 for Premium and Ultimate on GitLab.com and GitLab Self-Managed, with GitLab Dedicated coming soon. Built on OpenBao, it stores build-time and runtime credentials under the same permissions and audit trail as your code. Platform teams can offer developers self-service secrets, and security teams get credentials scoped to the jobs that use them, plus the pipeline and job ID on every CI/CD read. "GitLab Secrets Manager lets us centralize secrets across CI/CD, Kubernetes, and infrastructure as code without standing up multiple vaults or maintaining separate integration points. It also strengthens our supply chain security by tightening which users and pipelines can access a given credential." - Jeremy Nauta, Software Architect, OneTrust How Secrets Manager scopes build-time secrets to each job Agents can take actions no one anticipated, so security teams need to regard every job as if its agents will use any credential it can reach. Secrets Manager narrows what agents can reach with the context GitLab already holds about each job: its project, the branch it runs on, whether that branch is protected, and the environment it targets. A developer declares the secret a job needs with the secrets: keyword in .gitlab-ci.yml, and GitLab injects the value only into jobs that declare it and fall within its scope. Scope conditions accept wildcards on branch and environment, and they combine, so one rule can require a protected branch and a production/* environment before a job receives the credential. Inside the job, GitLab writes the value to a temporary file and exposes only its path, which limits exposure in subprocesses, crash dumps, and telemetry. GitLab masks the value in job logs and discards it when the job ends. Unlike a CI/CD variable, a secret is never readable in your project configuration. OpenBao encrypts secrets at rest with AES-256-GCM, so a copy of the secrets database holds only ciphertext. Jobs fetch values straight from OpenBao with short-lived tokens bound to each job’s identity, which keeps plaintext secrets out of the GitLab application. See how to get started with Secrets Manager: Revoke and trace an exposed credential When the axios npm package was compromised, a SANS advisory warned teams to "assume all environment variables on affected systems were exfiltrated" and extend investigations to CI/CD runners and build infrastructure. Responders had to work out which credentials each affected job could read, how to cut off access, and which runs read them. With Secrets Manager, when a job runs a poisoned dependency, the exposure stops at the secrets that job declared and was authorized to read. To clean up, revoke and replace the leaked credential, update the value in Secrets Manager, and audit that one job while other pipelines keep running. Secrets Manager prompts you to set a rotation reminder when you create a secret. Dynamic credentials are coming soon and will provide ephemeral access without manual rotation. GitLab streams every secret create, read, update, and delete event to your audit event destinations and records changes in the audit trail. Each pipeline read carries the pipeline and job IDs, which tie to the commit, the triggering user, and the merge request, when there is one. Incident responders and auditors can trace a read to the change behind it without correlating logs from a CI system, a vault, and an identity provider. Audit events never contain secret values. Govern secrets with the permissions that govern your code As agents take on more work, platform teams field more requests for pipelines and service accounts that need credentials. When those requests queue, teams fall back on broad grants and shared secrets. Secrets Manager uses the GitLab namespace as its isolation boundary. Projects inherit secrets defined in the groups above them, so you define a shared credential once. Owners grant read, write, and delete permissions to specific users or default roles, using the same membership model that governs the code. Remove a person or an agent's service account from a project, and that identity's access to the project's secrets ends. Developers reference secrets through the project access they already hold. When a secret reference breaks, they fix it in the same merge request as the code, with no second repository, approver, or access ticket. With a governed credential one line away, fewer secrets end up in over-scoped CI/CD variables, local files, or the repository. One store for pipelines and runtime workloads Kubernetes, Terraform, and scripts often get separate secret stores, each with its own access model and logs. Secrets Manager serves runtime tools from the same store as pipelines, under the same permissions and audit trail: Kubernetes, through External Secrets Operator. ESO re-fetches the secret on a set interval and updates the Kubernetes Secret in place, so a rotated value reaches the cluster without a pipeline run. Terraform and OpenTofu. They read a secret as a data source at plan or apply time and keep credentials out of .tfvars files and CI/CD variables. OpenBao and Vault CLIs, through the Vault-compatible API. Teams keep their existing scripts and point them at Secrets Manager. Other runtime tools, through the Secrets Manager API. Each runtime tool authenticates with a service account or an access token, and that identity needs project membership and explicit read permission for the secret. GitLab then issues a separate token, valid for five minutes, that the tool uses to fetch it. How Secrets Manager fits with GitLab's supply chain controls GitLab’s governed software factory connects code, pipelines, packages, and secrets on one platform, with one identity model and one record of how a change reached production. Dependency Firewall decides which packages enter a pipeline, Secrets Manager limits which credentials the pipeline can reach, and Artifact Central governs what you ship. Secrets Manager supports two of the five stages in the GitLab Security Standard, GitLab's framework for letting agents earn autonomy: For Authorize, it binds each job to the secrets its identity and scope allow, and for Respond, it streams every CRUD event. Secret push protection blocks commits containing credentials before they reach the repository, and Secret detection finds the ones already in your code and history. GitLab Duo Agent Platform triages what those scans find and flags likely false positives, so your team revokes, rotates, and audits only real leaks. GitLab's existing integrations for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Cloud Secret Manager keep working alongside Secrets Manager, so you can migrate at your own pace. Get started GitLab Secrets Manager is a paid add-on for Premium and Ultimate, billed through GitLab Credits: 1 credit per secret stored per month, and 1 credit per 2,500 read operations. An enterprise license agreement is available for air-gapped environments. On GitLab.com, top-level group Owners can try GitLab Secrets Manager free for 30 days or 500 evaluation credits, whichever ends first. Go to your top-level group, select Secure > Secrets Manager, then Start 30-day trial. On GitLab Self-Managed, your administrator must install and enable Secrets Manager, following the documented sizing and high-availability guidance. GitLab Dedicated support is coming soon. To find the first credentials to move, run the secret audit tool for CI/CD variables, which flags variables likely to hold credentials. A migration workflow for CI/CD variables is in development. Have suggestions or feedback? Share them in the Secrets Manager feedback issue.
LOS ANGELES, Oct. 14, 2026 -- BDG Law Group ("BDG") is providing notice of a data breach involving personal information belonging to certain individuals. BDG became aware of a network disruption on September 11, 2025. With the assistance of cybersecurity specialists, it...
Versus Systems, a leading provider of gamification and audience engagement technology, integrates Drinkfinger into its growing product marketing offerings. Drinkfinger uses QR-enabled beverage carriers to connect live-event attendees with mobile games, rewards and branded content. The company is targeting Latin American markets, where sports and entertainment events provide potential venues for interactive audience engagement. Versus’ Winfinite platform offers customizable web-based games that brands can use in promotional campaigns. Its Filter Fan Cam product brings augmented-reality effects into live venue experiences, creating additional sponsorship opportunities. Management also discussed the relationship between artificial intelligence and cybersecurity as Versus considers the future of its digital engagement ecosystem. LOS ANGELES, CA - October 14, 2026 - Versus Systems (NASDAQ: VS), a leading provider of gamification and audience engagement technology, is expanding its audience-engagement strategy through Drinkfinger, a QR-enabled beverage carrier initiative that links live-event attendees to interactive digital experiences. CEO Luis Goldner and members of the company’s leadership team outlined the initiative, its Latin American expansion plans and the company’s approach to artificial intelligence during a recent appearance on IBN’s Stock2Me Podcast. The discussion focused on how Versus can turn a routine concession purchase into an entry point for digital interaction. Through Drinkfinger, fans scan a QR code on a beverage carrier to access games, promotional offers and event-related content on their phones. The approach is designed to reduce the steps between encountering a brand at a venue and participating in a… Read More Please see full terms of use and disclaimers on the InvestorBrandNetwork website applicable to all content provided by IBN, wherever published or re-published: https://IBN.ai/Disclaimer The latest news and updates relating to VS are available in the company’s newsroom at https://ibn.fm/VSI Forward Looking Statements Certain statements in this article are forward-looking, as defined in the Private Securities Litigation Reform Act of 1995. These statements involve risks, uncertainties, and other factors that may cause actual results to differ materially from the information expressed or implied by these forward-looking statements and may not be indicative of future results. These forward-looking statements are subject to a number of risks and uncertainties, including, among others, various factors beyond management's control, including the risks set forth under the heading "Risk Factors" discussed under the caption "Item 1A. Risk Factors" in Part I of the Company's most recent Annual Report on Form 10-K or any updates discussed under the caption "Item 1A. Risk Factors" in Part II of the Company's Quarterly Reports on Form 10-Q and in the Company's other filings with the SEC. Undue reliance should not be placed on the forward-looking statements in this article in making an investment decision, which are based on information available to us on the date hereof. All parties undertake no duty to update this information unless required by law.
The post Unpaid toll? Missed delivery? Microsoft moves to disrupt a global cybercrime marketplace appeared first on Source.
- - • BT's AI-ready networking platform now offers optimised connectivity to security service edge (SSE) solutions from Cisco, Fortinet, Netskope and Zscaler. - - • The new capability can help customers rapidly scale use of AI agents, cloud applications and autonomous digital workflows. - - - - BT International today announced the expansion of its Global Fabric network-as-a-service (NaaS) platform with a choice of security service edge (SSE) solutions to support multinational customers'... Read the full story at https://www.webwire.com/ViewPressRel.asp?aId=362845
Acquisition establishes Lineal’s presence in Switzerland and adds deep expertise in digital forensics, cyber security and open-source intelligence KANSAS CITY, MO, [OCT. 14, 2026] – Lineal, a global provider of legal technology and services, today announced the acquisition of Forentec, a […]
With OpenAI Daybreak, SentinelOne cuts weeks of malware analysis to hours, creating capacity to investigate more threats.
Atos expands partnership with Fortinet to deliver a global unified cybersecurity framework across hybrid and multi-cloud environments