YesWeHack has raised more than $52 million to date to build and market a crowdsourced vulnerability reporting platform. The post French Bug Bounty Platform YesWeHack Raises $28 Million appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…
Tag: SecurityWeek RSS Feed
Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation
The zero-day is tagged as CVE-2024-32896 and described as an elevation of privilege issue in Pixel Firmware. The post Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Data Security Firm Cyberhaven Raises $88 Million at $488 Million Valuation
Data security company Cyberhaven has raised $88 million in a Series C funding round that brings the total to $136 million. The post Data Security Firm Cyberhaven Raises $88 Million at $488 Million Valuation appeared first on SecurityWeek. This article…
Fortinet Patches Code Execution Vulnerability in FortiOS
Fortinet has patched multiple vulnerabilities in FortiOS, including a high-severity code execution security flaw. The post Fortinet Patches Code Execution Vulnerability in FortiOS appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original article:…
Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day
The Black Basta ransomware gang may have exploited the Windows privilege escalation flaw CVE-2024-26169 before it was patched. The post Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Microsoft Patches Zero-Click Outlook Vulnerability That Could Soon Be Exploited
Microsoft’s June 2024 Patch Tuesday updates resolve a zero-click Outlook vulnerability leading to remote code execution. The post Microsoft Patches Zero-Click Outlook Vulnerability That Could Soon Be Exploited appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…
GitHub Paid Out Over $4 Million via Bug Bounty Program
The code hosting platform GitHub has paid out more than $4 million since the launch of its bug bounty program 10 years ago. The post GitHub Paid Out Over $4 Million via Bug Bounty Program appeared first on SecurityWeek. This…
When Vendors Overstep – Identifying the AI You Don’t Need
AI models are nothing without vast data sets to train them and vendors will be increasingly tempted to harvest as much data as they can and answer any questions later. The post When Vendors Overstep – Identifying the AI You…
Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities
Google and Mozilla have released patches for 21 and 15 vulnerabilities in Chrome and Firefox, respectively. The post Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the…
ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA
Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in their industrial and OT products. The post ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA appeared first on SecurityWeek. This article has been…
Ransomware Group Exploits PHP Vulnerability Days After Disclosure
The TellYouThePass ransomware gang started exploiting a recent code execution flaw in PHP days after public disclosure. The post Ransomware Group Exploits PHP Vulnerability Days After Disclosure appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed…
Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing
The Windows vulnerability carries a CVSS severity score of 9.8/10 and can be exploited by via specially crafted malicious MSMQ packets. The post Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing appeared first on SecurityWeek. This article has…
Adobe Plugs Code Execution Holes in After Effects, Illustrator
Patch Tuesday: Adobe fixes critical flaws and warns of the risk of code execution attacks on Windows and macOS platforms. The post Adobe Plugs Code Execution Holes in After Effects, Illustrator appeared first on SecurityWeek. This article has been indexed…
Two Arrested in UK for Smishing Campaign Powered by Homemade SMS Blaster
UK authorities have arrested two individuals for allegedly using a homemade mobile antenna to send mass text messages. The post Two Arrested in UK for Smishing Campaign Powered by Homemade SMS Blaster appeared first on SecurityWeek. This article has been…
Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers
Redfox Security warns of multiple vulnerabilities in Netgear WNR614 routers discontinued three years ago. The post Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original article:…
Apple Patches Vision Pro Vulnerability Used in Possibly ‘First Ever Spatial Computing Hack’
Apple has released a visionOS update that patches CVE-2024-27812, which may be the first flaw specific to the VR headset. The post Apple Patches Vision Pro Vulnerability Used in Possibly ‘First Ever Spatial Computing Hack’ appeared first on SecurityWeek. This…
BlackBerry Cylance Data Offered for Sale on Dark Web
BlackBerry says the Cylance data offered for sale for $750,000 is old and its own systems have not been compromised. The post BlackBerry Cylance Data Offered for Sale on Dark Web appeared first on SecurityWeek. This article has been indexed…
Supreme Court Will Take Up Meta’s Bid to End Lawsuit Over Cambridge Analytica Privacy Scandal
The Supreme Court will take up Meta’s bid to end the lawsuit over the Cambridge Analytica privacy scandal. The post Supreme Court Will Take Up Meta’s Bid to End Lawsuit Over Cambridge Analytica Privacy Scandal appeared first on SecurityWeek. This…
Dangerous Liaisons: The Interaction Between Threat Actors and High-Risk Devices
Forescout’s 2024 analysis of the riskiest devices highlights vulnerabilities and threat actor interactions across IT, IoT, OT, and IoMT. The post Dangerous Liaisons: The Interaction Between Threat Actors and High-Risk Devices appeared first on SecurityWeek. This article has been indexed…
SAP Patches High-Severity Vulnerabilities in Financial Consolidation, NetWeaver
SAP has released 10 new security notes on June 2024 Security Patch Day, including two addressing high-severity vulnerabilities. The post SAP Patches High-Severity Vulnerabilities in Financial Consolidation, NetWeaver appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…