Malicious hackers have begun mass-exploiting two critical zero-day vulnerabilities in Ivanti’s widely-used corporate VPN appliance. That’s according to cybersecurity company Volexity, which first reported last week that China state-backed hackers are exploiting the two unpatched flaws in Ivanti Connect Secure…
Tag: Security News | TechCrunch
Snyk acquires Helios to bolster its AppSec platform
Snyk, the well-funded developer-focused security company, today announced that it has acquired Helios, a Tel Aviv-based startup that helps developers troubleshoot and understand their microservices in production. Snyk will use Helios to bolster its recently launched AppRisk service, its application…
Spot Technologies, now with $2M, will see AI security tech go into Mexico Walmarts
Spot’s flagship product, VisionX, taps into deep learning and computer vision technologies to analyze consumer and theft behaviors. © 2023 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the…
Framework says hackers accessed customer data after phishing attack on accounting partner
U.S. repairable laptop maker Framework has confirmed that hackers accessed customer data after successfully phishing an employee at its accounting service provider. In an email sent to affected customers, Framework said that an employee at Keating Consulting, its primary external…
Hyundai Motor India fixes bug that exposed customers’ personal data
Hyundai’s India subsidiary has fixed a bug that exposed its customers’ personal information in the South Asian market. TechCrunch reviewed a portion of the exposed data that included the registered owner name, mailing address, email address, and phone number of…
A geofence warrant typo cast a location dragnet spanning two miles over San Francisco
Civil liberties advocates have long argued that “geofence” search warrants are unconstitutional for their ability to ensnare entirely innocent people who were nearby at the time a crime was committed. But errors in the geofence warrant applications that go before…
State-backed hackers are exploiting new Ivanti VPN zero-days — but no patches yet
U.S. software giant Ivanti has confirmed that hackers are exploiting two critical-rated vulnerabilities affecting its widely-used corporate VPN appliance, but said that patches won’t be available until the end of the month. Ivanti said the two vulnerabilities — tracked as…
EU lawmakers under pressure to fully disclose dealings with child safety tech maker, Thorn
More trouble for European Union lawmakers in a controversial area of tech policymaking — namely the bloc’s proposed legislation to apply surveillance technologies, such as client-side scanning, to digital messaging to try to detect child sexual abuse material (CSAM). This…
A startup’s guide to cyberthreats — threat modeling and proactive security
Cybersecurity is a complex and multifaceted field, and even with thorough threat modeling, there’s always a risk of compromise. © 2023 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read…
Texas-based care provider HMG Healthcare says hackers stole unencrypted patient data
Texas-based care provider HMG Healthcare has confirmed that hackers accessed the personal data of residents and employees, but says it has been unable to determine what types of data were stolen. HMG Healthcare is headquartered in The Woodlands, Texas, and…
Fujitsu, facing heat over UK Post Office scandal, continues to rake in billions from government deals
Japanese tech giant Fujitsu is facing growing pressure from U.K. political quarters over its role in a scandal that saw hundreds of post office owners prosecuted for accounting discrepancies. But as Fujitsu has emerged as a leading protagonist in a…
Fidelity National Financial says hackers stole data on 1.3 million customers
Real estate services giant Fidelity National Financial has confirmed hackers stole data on 1.3 million of its customers during a November cyberattack that knocked the company offline for a week. FNF said in a filing Tuesday with federal regulators: “We…
AI aids nation-state hackers but also helps US spies to find them, says NSA cyber director
Nation state-backed hackers and criminals are using generative AI in their cyberattacks, but U.S. intelligence is also using artificial intelligence technologies to find malicious activity, according to a senior U.S. National Security Agency official. “We already see criminal and nation…
FTC bans X-Mode from selling phone location data, and orders firm to delete collected data
The U.S. Federal Trade Commission has banned the data broker X-Mode Social from sharing or selling users’ sensitive location data, the federal regulator said Tuesday. The first of its kind settlement prohibits X-Mode, now known as Outlogic, from sharing and…
AI aides nation-state hackers but also helps US spies to find them, says NSA cyber director
Nation state-backed hackers and criminals are using generative AI in their cyberattacks, but U.S. intelligence is also using artificial intelligence technologies to find malicious activity, according to a senior U.S. National Security Agency official. “We already see criminal and nation…
GenAI could make KYC effectively useless
KYC, or “know your customer,” is a process intended to help financial institutions, fintech startups and banks verify the identity of their customers. Not uncommonly, KYC authentication involves “ID images,” or cross-checked selfies used to confirm a person is who…
Gen AI could make KYC effectively useless
KYC, or “Know Your Customer,” is a process intended to help financial institutions, fintech startups and banks verify the identity of their customers. Not uncommonly, KYC authentication involves “ID images,” or cross-checked selfies used to confirm a person is who…
LoanDepot hit by suspected ransomware attack
Mortgage and loan giant LoanDepot said Monday it is experiencing a cyberattack and that it’s “working diligently to restore normal business operations as quickly as possible.” The Irvine, Calif.-based company said in a brief statement on its cybersecurity incident page…
SentinelOne acquires Peak XV-backed PingSafe for over $100 million
SentinelOne’s deal to acquire PingSafe valued the Peak XV-backed young startup at over $100 million, two sources familiar with the matter told TechCrunch, in one of the strongest and fastest deals emerging from India. The New York Stock Exchange-listed AI…
Law firm that handles data breaches was hit by data breach
An international law firm that works with companies affected by security incidents has experienced its own cyberattack that exposed the sensitive health information of hundreds of thousands of data breach victims. San Francisco-based Orrick, Herrington & Sutcliffe said last week…