The attackers are claiming to be affiliated with the notorious Cl0p ransomware group and links have been found to FIN11. The post Cybercriminals Claim Theft of Data From Oracle E-Business Suite Customers appeared first on SecurityWeek. This article has been…
Category: securityweek
Zania Raises $18 Million for AI-Powered GRC Platform
The company plans to triple its engineering and go‑to‑market teams and to accelerate its agentic AI platform. The post Zania Raises $18 Million for AI-Powered GRC Platform appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
1.5 Million Impacted by Allianz Life Data Breach
In July, hackers stole files containing names, addresses, dates of birth, and Social Security numbers from a cloud-based CRM. The post 1.5 Million Impacted by Allianz Life Data Breach appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks
Three vulnerabilities have been patched with the release of OpenSSL updates. The post OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: OpenSSL Vulnerabilities…
Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware
Focused on espionage, the threat actor shares infrastructure with Chinese APTs, but uses different TTPs in attacks. The post Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
Canadian Airline WestJet Says Hackers Stole Customer Data
The company says names, contact details, and ID documents provided in connection with reservations and travel were stolen from its systems. The post Canadian Airline WestJet Says Hackers Stole Customer Data appeared first on SecurityWeek. This article has been indexed…
Cybersecurity Awareness Month 2025: Prioritizing Identity to Safeguard Critical Infrastructure
This year’s theme focuses on government entities and small and medium-sized businesses that are vital to protecting the systems and services that keep our communities running. The post Cybersecurity Awareness Month 2025: Prioritizing Identity to Safeguard Critical Infrastructure appeared first…
Descope Raises $35 Million in Seed Round Extension
The identity and access management provider will invest in agentic identity R&D, expand to new regions, and hire new talent. The post Descope Raises $35 Million in Seed Round Extension appeared first on SecurityWeek. This article has been indexed from…
NIST Publishes Guide for Protecting ICS Against USB-Borne Threats
NIST Special Publication 1334 focuses on reducing cybersecurity risks associated with the use of removable media devices in OT environments. The post NIST Publishes Guide for Protecting ICS Against USB-Borne Threats appeared first on SecurityWeek. This article has been indexed…
Cybersecurity Awareness Month 2025:Prioritizing Identity to Safeguard Critical Infrastructure
This year’s theme focuses on government entities and small and medium-sized businesses that are vital to protecting the systems and services that keep our communities running. The post Cybersecurity Awareness Month 2025:Prioritizing Identity to Safeguard Critical Infrastructure appeared first on…
Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability
Impacting VMware Aria Operations and VMware Tools, the flaw can be exploited to elevate privileges on the VM. The post Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Battering RAM Attack Breaks Intel and AMD Security Tech With $50 Device
Intel and AMD say the research is not in scope of their threat model because the attack requires physical access to a device. The post Battering RAM Attack Breaks Intel and AMD Security Tech With $50 Device appeared first on…
Call for Presentations Open for 2025 CISO Forum Virtual Summit
This online event is expected to attract more than 2,500 attendee registrations from around the world. The post Call for Presentations Open for 2025 CISO Forum Virtual Summit appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
Google Patches Gemini AI Hacks Involving Poisoned Logs, Search Results
Researchers found more methods for tricking an AI assistant into aiding sensitive data theft. The post Google Patches Gemini AI Hacks Involving Poisoned Logs, Search Results appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original…
Mondoo Raises $17.5 Million for Vulnerability Management Platform
Mondoo has raised more than $32 million in total, with the latest funding round led by HV Capital. The post Mondoo Raises $17.5 Million for Vulnerability Management Platform appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
New Guidance Calls on OT Operators to Create Continually Updated System Inventory
Agencies in several countries have created guidance titled ‘Creating and Maintaining a Definitive View of Your OT Architecture’. The post New Guidance Calls on OT Operators to Create Continually Updated System Inventory appeared first on SecurityWeek. This article has been…
CISO Conversations: John ‘Four’ Flynn, VP of Security at Google DeepMind
Flynn has been DeepMind’s VP of security since May 2024. Before then he had been a CISO with Amazon, CISO at Uber, and director of information security at Facebook. The post CISO Conversations: John ‘Four’ Flynn, VP of Security at…
High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenter
The flaws could allow attackers to escalate privileges, manipulate notifications, and enumerate usernames. The post High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenter appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: High-Severity…
California Gov. Gavin Newsom Signs Bill Creating AI Safety Measures
The Transparency in Frontier Artificial Intelligence Act (TFAIA) requires AI companies to implement and disclose publicly safety protocols to prevent their most advanced models from being used to cause major harm. The post California Gov. Gavin Newsom Signs Bill Creating…
Apple Updates iOS and macOS to Prevent Malicious Font Attacks
The vulnerability could lead to a denial-of-service condition or memory corruption when a malicious font is processed. The post Apple Updates iOS and macOS to Prevent Malicious Font Attacks appeared first on SecurityWeek. This article has been indexed from SecurityWeek…