Patch Tuesday: Adobe releases patches for 28 security vulnerabilities and warned of code execution risks on Windows and macOS platforms. The post Adobe Patches Critical, Code Execution Flaws in Multiple Products appeared first on SecurityWeek. This article has been indexed…
Category: SecurityWeek RSS Feed
Study Finds Excessive Use of Remote Access Tools in OT Environments
The excessive use of remote access tools in OT environments can increase the attack surface, complicate identity management, and hinder visibility. The post Study Finds Excessive Use of Remote Access Tools in OT Environments appeared first on SecurityWeek. This article…
Darkhive Raises $21 Million for Drones, Secure Code Delivery System
Drone maker Darkhive has raised $21 million in a round led by cybersecurity-focused venture capital firm Ten Eleven. The post Darkhive Raises $21 Million for Drones, Secure Code Delivery System appeared first on SecurityWeek. This article has been indexed from…
Slim CD Data Breach Impacts 1.7 Million Individuals
Slim CD says the personal and credit card information of 1.7 million was compromised in a ten-month-long data breach. The post Slim CD Data Breach Impacts 1.7 Million Individuals appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Poland’s Cybersecurity Experts Foil Russian and Belarussian Attacks
Poland’s security officials said they have foiled cyberattacks and online blackmail attempts by groups acting for Russian and Belarusian services. The post Poland’s Cybersecurity Experts Foil Russian and Belarussian Attacks appeared first on SecurityWeek. This article has been indexed from…
Google Pushes Rust in Legacy Firmware to Tackle Memory Safety Flaws
Google’s adoption of memory safe programming languages now includes the deployment of Rust in legacy low-level firmware codebases. The post Google Pushes Rust in Legacy Firmware to Tackle Memory Safety Flaws appeared first on SecurityWeek. This article has been indexed…
300,000 Impacted by Data Breach at Car Rental Firm Avis
Avis Car Rental is notifying roughly 300,000 individuals that their personal information was stolen in an August 2024 data breach. The post 300,000 Impacted by Data Breach at Car Rental Firm Avis appeared first on SecurityWeek. This article has been…
Two Indicted in US for Running Dark Web Marketplaces Offering Stolen Information
A Kazakhstani and a Russian national were indicted in the US for operating dark web sites facilitating PII, card, and banking information trading. The post Two Indicted in US for Running Dark Web Marketplaces Offering Stolen Information appeared first on…
Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks
A recently patched SonicWall vulnerability tracked as CVE-2024-40766 may have been exploited in ransomware attacks. The post Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the…
One Million US Kaspersky Customers Transferred to Pango’s UltraAV
Kaspersky’s customers in the US are being acquired by cybersecurity firm Pango and will be offered UltraAV antimalware software. The post One Million US Kaspersky Customers Transferred to Pango’s UltraAV appeared first on SecurityWeek. This article has been indexed from…
Industry Moves for the week of September 9, 2024 – SecurityWeek
Explore industry moves and significant changes in the industry for the week of September 9, 2024. Stay updated with the latest industry trends and shifts. This article has been indexed from SecurityWeek RSS Feed Read the original article: Industry Moves…
Predator Spyware Resurfaces With Fresh Infrastructure
Recorded Future observes renewed Predator spyware activity on fresh infrastructure after a drop caused by US sanctions. The post Predator Spyware Resurfaces With Fresh Infrastructure appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the…
US Gov Removing Four-Year-Degree Requirements for Cyber Jobs
The US government will remove “unnecessary degree requirements” in favor of skills-based hiring to help fill 500,000 open cybersecurity jobs. The post US Gov Removing Four-Year-Degree Requirements for Cyber Jobs appeared first on SecurityWeek. This article has been indexed from…
Recent SonicWall Firewall Vulnerability Potentially Exploited in the Wild
SonicWall is warning customers that the recently patched critical vulnerability CVE-2024-40766 may be exploited in the wild. The post Recent SonicWall Firewall Vulnerability Potentially Exploited in the Wild appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…
Apache Makes Another Attempt at Patching Exploited RCE in OFBiz
The latest Apache OFBiz update patches CVE-2024-45195, a bypass of a recently disclosed remote code execution bug exploited in attacks. The post Apache Makes Another Attempt at Patching Exploited RCE in OFBiz appeared first on SecurityWeek. This article has been…
LiteSpeed Cache Plugin Vulnerability Exposes Millions of WordPress Sites to Attacks
A vulnerability in the LiteSpeed Cache WordPress plugin leads to the exposure of sensitive information, including user cookies. The post LiteSpeed Cache Plugin Vulnerability Exposes Millions of WordPress Sites to Attacks appeared first on SecurityWeek. This article has been indexed…
Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage
A secretive Russian military unit, previously linked to assassinations and destabilization in Europe, is blamed for destructive wiper malware attacks in Ukraine. The post Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage appeared first on…
The AI Wild West: Unraveling the Security and Privacy Risks of GenAI Apps
GenAI users are uploading data to over eight apps every month – what are the security and privacy concerns? The post The AI Wild West: Unraveling the Security and Privacy Risks of GenAI Apps appeared first on SecurityWeek. This article…
Cisco Patches Critical Vulnerabilities in Smart Licensing Utility
Cisco has released patches for multiple vulnerabilities, including two critical-severity flaws in Smart Licensing Utility. The post Cisco Patches Critical Vulnerabilities in Smart Licensing Utility appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the…
Two Nigerians Sentenced to Prison in US for BEC Fraud
Franklin Ifeanyichukwu Okwonna and Ebuka Raphael Umeti were sentenced to prison in the US for business email compromise (BEC) fraud. The post Two Nigerians Sentenced to Prison in US for BEC Fraud appeared first on SecurityWeek. This article has been…
US Targets Russian Election Influence Operation With Charges, Sanctions, Domain Seizures
The US has cracked down on an influence operation sponsored by the Russian government, announcing charges, sanctions and domain seizures. The post US Targets Russian Election Influence Operation With Charges, Sanctions, Domain Seizures appeared first on SecurityWeek. This article has…
Microsoft Tackling Windows Logfile Flaws With New HMAC-Based Security Mitigation
Microsoft is experimenting with a major new security mitigation to block attacks targeting flaws in the Windows Common Log File System (CLFS). The post Microsoft Tackling Windows Logfile Flaws With New HMAC-Based Security Mitigation appeared first on SecurityWeek. This article…
FBI: North Korea Aggressively Hacking Cryptocurrency Firms
The FBI warns of North Korean threat actors conducting social engineering campaigns targeting employees in the cryptocurrency industry. The post FBI: North Korea Aggressively Hacking Cryptocurrency Firms appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed…
Crypto Vulnerability Allows Cloning of YubiKey Security Keys
YubiKey security keys can be cloned via a side-channel attack that leverages a vulnerability in a cryptographic library. The post Crypto Vulnerability Allows Cloning of YubiKey Security Keys appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…
White House Outlines Plan for Addressing BGP Vulnerabilities
The White House has released a roadmap for addressing internet routing (BGP) security issues, mainly through RPKI adoption. The post White House Outlines Plan for Addressing BGP Vulnerabilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…
Android’s September 2024 Update Patches Exploited Vulnerability
Google has released Android security updates to patch an exploited local privilege escalation vulnerability. The post Android’s September 2024 Update Patches Exploited Vulnerability appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original article:…
Halliburton Confirms Data Stolen in Cyberattack
The US oil giant updated an SEC filing to confirm malicious hackers “accessed and exfiltrated information” from its corporate systems. The post Halliburton Confirms Data Stolen in Cyberattack appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…
VMware Patches High-Severity Code Execution Flaw in Fusion
VMware rolls out patch for a high-severity code execution vulnerability in the Fusion hypervisor. The post VMware Patches High-Severity Code Execution Flaw in Fusion appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original…
CISO Conversations: Jaya Baloo From Rapid7 and Jonathan Trull From Qualys
CSOs Jaya Baloo and Jonathan Trull discuss the route, role, and requirements in becoming and being a successful CISO. The post CISO Conversations: Jaya Baloo From Rapid7 and Jonathan Trull From Qualys appeared first on SecurityWeek. This article has been…
Verkada to Pay $2.95 Million Over FTC Probe Into Security Camera Hacking
The FTC complaint alleges that Verkada’s failures allowed a hacker to access customers’ security cameras. The post Verkada to Pay $2.95 Million Over FTC Probe Into Security Camera Hacking appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
City of Columbus Sues Researcher Who Disclosed Impact of Ransomware Attack
The City of Columbus sued a researcher who disclosed the impact of the data breach caused by a recent ransomware attack. The post City of Columbus Sues Researcher Who Disclosed Impact of Ransomware Attack appeared first on SecurityWeek. This article…
Industry Moves for the week of September 2, 2024 – SecurityWeek
Explore industry moves and significant changes in the industry for the week of September 2, 2024. Stay updated with the latest industry trends and shifts. This article has been indexed from SecurityWeek RSS Feed Read the original article: Industry Moves…
Chrome 128 Updates Patch High-Severity Vulnerabilities
Google has released two Chrome 128 updates to address six high-severity vulnerabilities reported by external researchers. The post Chrome 128 Updates Patch High-Severity Vulnerabilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original…
Microsoft Says North Korean Cryptocurrency Thieves Behind Chrome Zero-Day
Redmond’s threat intel team said exploitation of CVE-2024-7971 can be attributed to a North Korean APT targeting the cryptocurrency sector for financial gain. The post Microsoft Says North Korean Cryptocurrency Thieves Behind Chrome Zero-Day appeared first on SecurityWeek. This article…
In Other News: Automotive CTF, Deepfake Scams, Singapore’s OT Security Masterplan
Noteworthy stories that might have slipped under the radar: automotive CTF with $100k in prizes, deepfake scams, and Singapore’s OT security masterplan for 2024. The post In Other News: Automotive CTF, Deepfake Scams, Singapore’s OT Security Masterplan appeared first on…
Fortra Patches Critical Vulnerability in FileCatalyst Workflow
Fortra limits access to FileCatalyst Workflow database after vendor knowledgebase article leaks default credentials. The post Fortra Patches Critical Vulnerability in FileCatalyst Workflow appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original article:…
2 Men From Europe Charged With ‘Swatting’ Plot Targeting Former US President and Members of Congress
A former US president and several members of Congress were targets of a plot carried out by two European men to intimidate and threaten dozens of people by calling in bogus reports of police emergencies at their homes. The post…
Dick’s Sporting Goods Says Sensitive Data Exposed in Cyberattack
The sporting goods retail chain said hte incident exposed portions of the its IT systems containing confidential information. The post Dick’s Sporting Goods Says Sensitive Data Exposed in Cyberattack appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Dick’s Sporting Goods Discloses Cyberattack
The sporting goods retail chain said hte incident exposed portions of the its IT systems containing confidential information. The post Dick’s Sporting Goods Discloses Cyberattack appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the…
Cisco Patches Multiple NX-OS Software Vulnerabilities
Cisco on Wednesday announced NX-OS software updates that resolve multiple vulnerabilities, including a high-severity DoS bug. The post Cisco Patches Multiple NX-OS Software Vulnerabilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original…
Iranian Hackers Use New Tickler Malware to Collect Intel From US, UAE
The Iran-linked state-sponsored hacker group tracked as Peach Sandstorm has started using a new backdoor in attacks aimed at the US and UAE. The post Iranian Hackers Use New Tickler Malware to Collect Intel From US, UAE appeared first on…
US Sees Iranian Hackers Working Closely With Ransomware Groups
Iranian state-sponsored APT Lemon Sandstorm is working closely with ransomware groups on monetizing network intrusions. The post US Sees Iranian Hackers Working Closely With Ransomware Groups appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read…
CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sales
Massive outage spooked customers that had been expected to close deals totaling $60 million during the final few weeks of CrowdStrike’s fiscal Q2. The post CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in…
Google Now Offering Up to $250,000 for Chrome Vulnerabilities
Google has significantly increased the rewards for Chrome browser vulnerabilities, offering up to $250,000 for remote code execution bugs. The post Google Now Offering Up to $250,000 for Chrome Vulnerabilities appeared first on SecurityWeek. This article has been indexed from…
LinkedIn Hires Former Twitter Security Chief Lea Kissner as New CISO
Lea Kissner replaces Geoff Belknap as Chief Information Security Officer (CISO) at Microsoft-owned LinkedIn. The post LinkedIn Hires Former Twitter Security Chief Lea Kissner as New CISO appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed…
WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies
A WPS Office zero-day vulnerability tracked as CVE-2024-7262 was exploited by South Korean hacker group APT-C-60. The post WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read…
Malware Delivered via Malicious Pidgin Plugin, Signal Fork
Threat actors delivered malware via instant messaging applications, including a malicious Pidgin plugin and an unofficial Signal fork. The post Malware Delivered via Malicious Pidgin Plugin, Signal Fork appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…
Rising Tides: Runa Sandvik on Creating Work that Makes a Difference
Runa Sandvik is an inaugural member of CISA’s Technical Advisory Council and the Aspen Institute’s Global Cybersecurity Group, and a board member of the Signals Network. But she is so much more. The post Rising Tides: Runa Sandvik on Creating…
US Offering $2.5 Million Reward for Belarusian Malware Distributor
The US government is offering a $2.5 million reward for information leading to the arrest of malware distributor Volodymyr Kadariya. The post US Offering $2.5 Million Reward for Belarusian Malware Distributor appeared first on SecurityWeek. This article has been indexed…
Cribl Raises $319 Million at $3.5 Billion Valuation
The IT and data security firm raises $319 million in a Series E round led by Google Ventures and is now valued at $3.5 billion. The post Cribl Raises $319 Million at $3.5 Billion Valuation appeared first on SecurityWeek. This…
When Convenience Costs: CISOs Struggle With SaaS Security Oversight
SaaS applications are so easy to use, the decision, and the deployment, is sometimes undertaken by the business unit user with little reference to, nor oversight from, the security team. The post When Convenience Costs: CISOs Struggle With SaaS Security…
Cisco to Acquire AI Security Firm Robust Intelligence
Cisco intends to acquire Robust Intelligence, a California-based company that specializes in securing AI applications. The post Cisco to Acquire AI Security Firm Robust Intelligence appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the…
Seattle Airport Blames Outages on Possible Cyberattack
The Port of Seattle, including the SEA Airport, is experiencing system outages likely caused by a cyberattack. The post Seattle Airport Blames Outages on Possible Cyberattack appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read…
Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day
Malware hunters catch Chinese APT Volt Typhoon exploiting a zero-day in Versa Director servers used by ISPs and MSPs. The post Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day appeared first on SecurityWeek. This article has been indexed…
Georgia Tech Sued Over Alleged False Cybersecurity Reports to Win DoD Contracts
Complaint alleges that defendants submitted a false and fraudulent cybersecurity assessment score. The post Georgia Tech Sued Over Alleged False Cybersecurity Reports to Win DoD Contracts appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read…
SonicWall Patches Critical SonicOS Vulnerability
SonicWall has patched CVE-2024-40766, a critical SonicOS vulnerability that can lead to unauthorized access or a firewall crash. The post SonicWall Patches Critical SonicOS Vulnerability appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the…
Uber to Appeal Dutch €290 Million GDPR Fine
The Dutch Data Protection Authority has fined Uber €290 million ($320 million) for driver data transfer practices that allegedly violate GDPR. The post Uber to Appeal Dutch €290 Million GDPR Fine appeared first on SecurityWeek. This article has been indexed…
Industry Moves for the week of August 26, 2024 – SecurityWeek
Explore industry moves and significant changes in the industry for the week of August 26, 2024. Stay updated with the latest industry trends and shifts. This article has been indexed from SecurityWeek RSS Feed Read the original article: Industry Moves…
Patelco Credit Union Says Breach Impacts 726k After Ransomware Gang Auctions Data
Patelco Credit Union has confirmed a data breach impacting many individuals after the RansomHub ransomware group stole some databases. The post Patelco Credit Union Says Breach Impacts 726k After Ransomware Gang Auctions Data appeared first on SecurityWeek. This article has…
Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations, Meta Says
Meta said it discovered a network of Iranian hackers, who posed as tech support agents for companies including AOL, Microsoft, Yahoo and Google. The post Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations, Meta Says appeared first…
In Other News: FAA Improving Cyber Rules, Android Malware Enables ATM Withdrawals, Data Theft via Slack AI
Noteworthy stories that might have slipped under the radar: FAA improving cyber rules for airplanes, NGate Android malware used to steal cash from ATMs, abusing Slack AI to steal data. The post In Other News: FAA Improving Cyber Rules, Android…
Hacker Tried to Dodge Child Support by Breaking Into Registry to Fake His Death, Prosecutors Say
Kentucky man attempted to fake his death to avoid paying child support obligations by hacking into state registries and falsifying official records. The post Hacker Tried to Dodge Child Support by Breaking Into Registry to Fake His Death, Prosecutors Say…
FBI Exposing Sensitive Data via Improper Handling of Storage Devices: Audit
Audit finds weaknesses in FBI’s inventory management and disposition procedures for drives containing sensitive information. The post FBI Exposing Sensitive Data via Improper Handling of Storage Devices: Audit appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…
SolarWinds Leaks Credentials in Hotfix for Exploited Web Help Desk Flaw
SolarWinds has issued a Web Help Desk hotfix to remove hardcoded credentials from last week’s hotfix for a critical-severity vulnerability. The post SolarWinds Leaks Credentials in Hotfix for Exploited Web Help Desk Flaw appeared first on SecurityWeek. This article has…
Oil Giant Halliburton Confirms Cyber Incident, Details Scarce
US oil giant Halliburton confirmed its computer systems were hit by a cyberattack that affected operations at its Houston offices. The post Oil Giant Halliburton Confirms Cyber Incident, Details Scarce appeared first on SecurityWeek. This article has been indexed from…
China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches
Hackers gained access to the switch using valid administrator credentials, and then ‘jailbroke’ from the application level into the OS level. The post China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches appeared first on SecurityWeek.…
Two Years On, Log4Shell Vulnerability Still Being Exploited to Deploy Malware
More than two years after the Log4j crisis, organizations are still being hit by crypto-currency miners and backdoor scripts. The post Two Years On, Log4Shell Vulnerability Still Being Exploited to Deploy Malware appeared first on SecurityWeek. This article has been…
Understanding the ‘Morphology’ of Ransomware: A Deeper Dive
Ransomware isn’t just about malware. It’s about brands, trust, and the shifting allegiances of cybercriminals. The post Understanding the ‘Morphology’ of Ransomware: A Deeper Dive appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original…
Atlassian Patches Vulnerabilities in Bamboo, Confluence, Crowd, Jira
Atlassian has released patches for nine high-severity vulnerabilities in Bamboo, Confluence, Crowd, and Jira products. The post Atlassian Patches Vulnerabilities in Bamboo, Confluence, Crowd, Jira appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the…
Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites
A critical vulnerability in the Litespeed Cache WordPress plugin can allow attackers to hack websites by creating an admin user. The post Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites appeared first on SecurityWeek. This article…
Critical Authentication Flaw Haunts GitHub Enterprise Server
GitHub patches a trio of security defects in the GitHub Enterprise Server product and recommends urgent patching for corporate users. The post Critical Authentication Flaw Haunts GitHub Enterprise Server appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Arden Claims Service Reports Data Breach, 139,000 Affected
Personal information for about 39,000 individuals was stolen in October 2023 from class action settlement administrator Arden Claims Service. The post Arden Claims Service Reports Data Breach, 139,000 Affected appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Thousands of Apps Using AWS ALB Exposed to Attacks Due to Configuration Issue
As many as 15,000 applications using AWS Application Load Balancer (ALB) could be exposed to ALBeast attacks. The post Thousands of Apps Using AWS ALB Exposed to Attacks Due to Configuration Issue appeared first on SecurityWeek. This article has been…
Google Cloud Unveils New Security Services and Capabilities
Several security-related enhancements have been announced at the 2024 Google Cloud Security Summit. The post Google Cloud Unveils New Security Services and Capabilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original article:…
Cyberattack Disrupts Microchip Technology Manufacturing Facilities
Microchip Technology has disclosed a cyberattack impacting operations at some of its manufacturing facilities. The post Cyberattack Disrupts Microchip Technology Manufacturing Facilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original article: Cyberattack…
Darktrace Co-founder Mike Lynch Presumed Dead After Superyacht Sinks
Mike Lynch, co-founder of Darktrace and Autonomy, is among six people presumed dead after the superyacht, Bayesian, sank off the coast of Sicily early Monday. The post Darktrace Co-founder Mike Lynch Presumed Dead After Superyacht Sinks appeared first on SecurityWeek.…
Major Backdoor in Millions of RFID Cards Allows Instant Cloning
Backdoor in millions of contactless cards made by Shanghai Fudan Microelectronics allows instantaneous cloning of RFID smart cards used to open office doors and hotel rooms around the world. The post Major Backdoor in Millions of RFID Cards Allows Instant…
Critical Flaw in Donation Plugin Exposed 100,000 WordPress Sites to Takeover
A critical vulnerability in the GiveWP WordPress plugin could be exploited for remote code execution and arbitrary file deletion. The post Critical Flaw in Donation Plugin Exposed 100,000 WordPress Sites to Takeover appeared first on SecurityWeek. This article has been…
Fabric Cryptography Raises $33 Million for VPU Chip
Fabric Cryptography has raised $33 million in Series A funding to create the Verifiable Processing Unit (VPU), a new chip for cryptography. The post Fabric Cryptography Raises $33 Million for VPU Chip appeared first on SecurityWeek. This article has been…
How Exceptional CISOs Are Igniting the Security Fire in Their Development Team
For years, many CISOs have struggled to influence their development cohort on the importance of putting security first. The post How Exceptional CISOs Are Igniting the Security Fire in Their Development Team appeared first on SecurityWeek. This article has been…
US Intelligence Officials Say Iran is to Blame for Hacks Targeting Trump, Biden-Harris Campaigns
The assessment from agencies was the first time the U.S. government assigned blame for hacks that have raised anew the threat of foreign election interference. The post US Intelligence Officials Say Iran is to Blame for Hacks Targeting Trump, Biden-Harris…
Windows Zero-Day Attack Linked to North Korea’s Lazarus APT
The vulnerability, tracked as CVE-2024-38193 and marked as ‘actively exploited’ by Microsoft, allows SYSTEM privileges on the latest Windows operating systems. The post Windows Zero-Day Attack Linked to North Korea’s Lazarus APT appeared first on SecurityWeek. This article has been…
National Public Data Says Breach Impacts 1.3 Million People
National Public Data (NPD) has confirmed suffering a data breach, but the company says the incident only affects 1.3 million people in the US. The post National Public Data Says Breach Impacts 1.3 Million People appeared first on SecurityWeek. This…
Oregon Zoo Ticketing Service Hack Impacts 118,000
A web skimmer was likely used to steal names and payment card data from the Oregon Zoo’s online ticketing service. The post Oregon Zoo Ticketing Service Hack Impacts 118,000 appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Industry Moves for the week of August 19, 2024 – SecurityWeek
Explore industry moves and significant changes in the industry for the week of August 19, 2024. Stay updated with the latest industry trends and shifts. This article has been indexed from SecurityWeek RSS Feed Read the original article: Industry Moves…
100,000 Impacted by Jewish Home Lifecare Data Breach
A Jewish Home Lifecare data breach resulting from a BlackCat ransomware attack impacts over 100,000 individuals. The post 100,000 Impacted by Jewish Home Lifecare Data Breach appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read…
Cloud Misconfigurations Expose 110,000 Domains to Extortion in Widespread Campaign
Security researchers at Palo Alto Networks discover a threat actor extorting organizations after compromising their cloud environments using inadvertently exposed environment variables. The post Cloud Misconfigurations Expose 110,000 Domains to Extortion in Widespread Campaign appeared first on SecurityWeek. This article…
Consolidation vs. Optimization: Which Is More Cost-Effective for Improved Security?
Security leaders are facing big decisions about how they use their monetary and people resources to better secure their environments. The post Consolidation vs. Optimization: Which Is More Cost-Effective for Improved Security? appeared first on SecurityWeek. This article has been…
New Banshee Stealer macOS Malware Priced at $3,000 Per Month
Russian cybercriminals are advertising a new macOS malware, Banshee Stealer, capable of stealing passwords, browser data, and crypto wallets. The post New Banshee Stealer macOS Malware Priced at $3,000 Per Month appeared first on SecurityWeek. This article has been indexed…
SolarWinds Web Help Desk Vulnerability Possibly Exploited as Zero-Day
The US cybersecurity agency CISA warns that a recent SolarWinds Web Help Desk vulnerability has been exploited in the wild. The post SolarWinds Web Help Desk Vulnerability Possibly Exploited as Zero-Day appeared first on SecurityWeek. This article has been indexed…
Zero-Click Exploit Concerns Drive Urgent Patching of Windows TCP/IP Flaw
Security experts are ratcheting up the urgency for Windows admins to patch a wormable, pre-auth remote code execution vulnerability in the Windows TCP/IP stack. The post Zero-Click Exploit Concerns Drive Urgent Patching of Windows TCP/IP Flaw appeared first on SecurityWeek.…
Ransomware Attacks on Industrial Firms Surged in Q2 2024
Dragos has seen a significant increase in ransomware attacks on industrial organizations in Q2 2024 compared to the previous quarter. The post Ransomware Attacks on Industrial Firms Surged in Q2 2024 appeared first on SecurityWeek. This article has been indexed…
SolarWinds Issues Hotfix for Critical Web Help Desk Vulnerability
SolarWinds has released a hotfix for a critical Java deserialization remote code execution vulnerability in Web Help Desk. The post SolarWinds Issues Hotfix for Critical Web Help Desk Vulnerability appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Palo Alto Networks Patches Unauthenticated Command Execution Flaw in Cortex XSOAR
Palo Alto Networks has patched multiple vulnerabilities, including ones rated high severity, in several products. The post Palo Alto Networks Patches Unauthenticated Command Execution Flaw in Cortex XSOAR appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…
AutoCanada Hit by Cyberattack
AutoCanada has disclosed a disruptive cybersecurity incident after also being impacted by the recent CDK Global ransomware attack. The post AutoCanada Hit by Cyberattack appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original…
GitHub Makes Copilot Autofix Generally Available
GitHub has made AI-powered Copilot Autofix generally available to help developers fix code vulnerabilities faster. The post GitHub Makes Copilot Autofix Generally Available appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original article:…
Cisco Cuts Thousands of Jobs, 7% of Workforce, As It Shifts Focus to AI, Cybersecurity
Cisco had 84,900 employees as of July 2023. Based on that figure, the number of jobs cut would be about 5,900. The post Cisco Cuts Thousands of Jobs, 7% of Workforce, As It Shifts Focus to AI, Cybersecurity appeared first…
Unconfirmed Hack of 2.9 Billion Records at National Public Data Sparks Media Frenzy Amid Lawsuits
National Public Data (NPD) is at the center of controversy with allegations of a massive data breach involving 2.9 billion records. Despite media coverage and a class action lawsuit, verifiable proof remains scarce The post Unconfirmed Hack of 2.9 Billion…
Secure Data Sharing Company Kiteworks Raises $456 Million
Secure data sharing solutions provider Kiteworks has raised $456 million in growth equity investment from Insight Partners and Sixth Street Growth. The post Secure Data Sharing Company Kiteworks Raises $456 Million appeared first on SecurityWeek. This article has been indexed…
Chipmaker Patch Tuesday: Intel, AMD Address Over 110 Vulnerabilities
Intel and AMD have each informed customers about dozens of vulnerabilities found and patched in their products. The post Chipmaker Patch Tuesday: Intel, AMD Address Over 110 Vulnerabilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…