- + Personal Information Stolen in City of Wichita Ransomware Attack—The City of Wichita says files containing personal information were exfiltrated in a recent ransomware attack. The post Personal Information Stolen...
- + Palo Alto Networks Teams Up With IBM, Acquires QRadar SaaS Assets —Palo Alto Networks and IBM have announced a significant partnership to jointly provide cybersecurity solutions. The post Palo Alto Networks Teams U...
- + Third Chrome Zero-Day Patched by Google Within One Week—Google releases Chrome 125 to the stable channel with patches for nine vulnerabilities, including a zero-day. The post Third Chrome Zero-Day Patche...
- + BreachForums Shut Down in Apparent Law Enforcement Operation—The hacking forum BreachForums is displaying a notice claiming that the website is under the control of the FBI. The post BreachForums Shut Down in...
- + In First AI Dialogue, US Cites ‘Misuse’ of AI by China, Beijing Protests Washington’s Restrictions—China advocates for the United Nations to take a leading role in the global governance of AI, a move that could sideline the U.S. The post In First...
- + Thoma Bravo-Owned LogRhythm Announces Merger With Rival Exabeam —Financial terms were not released but the price tag is expected to be hefty with Exabeam’s most recent valuation pegged at $2.5 billion. The post T...
- + Thoma Bravo-owned LogRhythm Announces Merger with Rival Exabeam —Financial terms were not released but the price tag is expected to be hefty with Exabeam’s most recent valuation pegged at $2.5 billion. The post T...
- + Threat Actors Abuse GitHub to Distribute Multiple Information Stealers—Russian-speaking threat actors are caught abusing a GitHub profile to distribute information stealers posing as legitimate software. The post Threa...
- + Intel Publishes 41 Security Advisories for Over 90 Vulnerabilities —Intel has published 41 new May 2024 Patch Tuesday advisories covering a total of more than 90 vulnerabilities. The post Intel Publishes 41 Securit...
- + Santander Data Breach Impacts Customers, Employees—The Spanish bank Santander said customers in Chile, Spain and Uruguay are affected by a data breach at a third-party provider. The post Santander D...
- + 400,000 Linux Servers Hit by Ebury Botnet —The Ebury Linux botnet has ensnared over 400,000 Linux systems in 15 years, with roughly 100,000 still infected. The post 400,000 Linux Servers Hit...
- + 900k Impacted by Data Breach at Mississippi Healthcare Provider—Singing River Health System says the personal information of roughly 900,000 individuals was stolen in an August 2023 ransomware attack. The post 9...
- + Unwanted Tracking Alerts Rolling Out to iOS, Android—Apple and Google have rolled out a new mobile feature that warns users of unwanted trackers moving with them. The post Unwanted Tracking Alerts Rol...
- + Senators Urge $32 Billion in Emergency Spending on AI After Finishing Yearlong Review—The group recommends that Congress draft emergency spending legislation to boost U.S. investments in artificial intelligence, including new R&D an...
- + ICS Patch Tuesday: Advisories Published by Siemens, Rockwell, Mitsubishi Electric—Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in their products. The post ICS Patch Tuesday: ...
- + Vermont Legislature Passes One of the Strongest Data Privacy Measures in the Country—Vermont legislature passed a bill that prohibits the sale of sensitive data, such as social security and drivers’ license numbers, financial or health...
- + Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities—Patch Tuesday: Microsoft documents 60 security flaws in multiple software products and flags an actively exploited Windows zero-day for urgent attenti...
- + Adobe Patches Critical Flaws in Reader, Acrobat—Adobe documents multiple code execution flaws in a wide range of products, including the widely deployed Adobe Acrobat and Reader software. The post...
- + SAP Patches Critical Vulnerabilities in CX Commerce, NetWeaver—SAP has released 14 new and three updated security notes on its May 2024 Security Patch Day. The post SAP Patches Critical Vulnerabilities in CX Co...
- + VMware Patches Vulnerabilities Exploited at Pwn2Own 2024—VMware has patched three vulnerabilities exploited earlier this year at the Pwn2Own hacking competition. The post VMware Patches Vulnerabilities Ex...
- + Hacker Conversations: Ron Reiter, and the Making of a Professional Hacker—Ron Reiter was a childhood hacker in Israel. He was recruited into the IDF’s elite Unit 8200 for his military service. Now he is CTO and co-founder of...
- + Attackers Use DNS Tunneling to Track Victim Activity, Scan Networks—Threat actors are using DNS tunneling to track victims’ interaction with spam and to scan network infrastructures. The post Attackers Use DNS Tunne...
- + Google Patches Second Chrome Zero-Day in One Week—Google has patched CVE-2024-4761, the second exploited vulnerability addressed by the company within one week. The post Google Patches Second Chro...
- + Student, Personnel Information Stolen in City of Helsinki Cyberattack—The City of Helsinki says usernames, email addresses, and personal information was stolen in a recent cyberattack. The post Student, Personnel Info...
- + MITRE EMB3D Threat Model Officially Released—MITRE announced the public availability of the EMB3D threat model for embedded devices used in critical infrastructure. The post MITRE EMB3D Threat...
- + FCC Warns of ‘Royal Tiger’ Robocall Scammers—The FCC has issued a public notice on robocall scammer group ‘Royal Tiger’, the first designated threat actor. The post FCC Warns of ‘Royal T...
- + Zscaler Confirms Only Isolated Test Server Was Hacked—Zscaler has completed its investigation into the recent hacking claims and found that only an isolated test environment was compromised. The post Z...
- + Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS—Apple documents another zero-day flaw being exploited on older iPhones and documents security problems in macOS, iOS and iPadOS. The post Apple Pat...
- + China and US Envoys Will Hold First Top-Level Dialogue on Artificial Intelligence—China’s official Xinhua news agency said the two sides would take up issues including the technological risks of AI and global governance. The post ...
- + Europol Investigating Breach After Hacker Offers to Sell Classified Data—Europol is investigating a data breach, but says no core systems are impacted and no operational data has been compromised. The post Europol Invest...
- + NATO Draws a Cyber Red Line in Tensions With Russia—Weakening liberal democracies and weakening the NATO alliance are conjoined in the hybrid war that Russia is conducting against Ukraine. The post N...
- + Cinterion Modem Flaws Pose Risk to Millions of Devices in Industrial, Other Sectors—A critical vulnerability in the Cinterion cellular modems can be exploited for remote code execution via SMS messages. The post Cinterion Modem Fla...
- + Black Basta Ransomware Hit Over 500 Organizations—The US government warns of Black Basta ransomware attacks targeting critical infrastructure organizations. The post Black Basta Ransomware Hit Over...
- + FBCS Collection Agency Data Breach Impacts 2.7 Million—Financial Business and Consumer Solutions (FBCS) says the personal information of 2.7 million was impacted in the recent data breach. The post FBCS...
- + $2.5 Million Offered at Upcoming ‘Matrix Cup’ Chinese Hacking Contest —The Chinese hacking contest Matrix Cup is offering big rewards for exploits targeting OSs, smartphones, enterprise software, browsers, and security pr...
- + Healthcare Giant Ascension Hacked, Hospitals Diverting Emergency Service—One of the largest healthcare systems in the United States is scrambling to contain a hack that's causing disruption and “downtime procedures” at hosp...
- + In Other News: European Parliament Breach, DocGo Hack, VMware Advisories Moved—Noteworthy stories that might have slipped under the radar: European Parliament application breached, DocGo hacked, VMware advisories moved to Broadco...
- + Exploited Chrome Zero-Day Patched by Google—A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024. The post Exploited Chrome ...
- + 500,000 Impacted by Ohio Lottery Ransomware Attack—The Ohio Lottery cyberattack conducted by the DragonForce ransomware group has impacted more than 500,000 individuals. The post 500,000 Impacted by...
- + RSA Conference 2024 – Announcements Summary (Day 4)—Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco. The post RSA...
- + Accenture Lands $789 Million Contract to Bolster U.S. Navy Cybersecurity—Accenture Federal Services wins $789 million U.S. Navy SHARKCAGE cybersecurity contract. The post Accenture Lands $789 Million Contract to Bolster ...
- + Dell Says Customer Names, Addresses Stolen in Database Breach—Tech giant notifies millions of customers that full names and physical mailing addresses were stolen during a security incident. The post Dell Says...
- + Criminal Use of AI Growing, But Lags Behind Defenders—When not scamming other criminals, criminals are concentrating on the use of mainstream AI products rather than developing their own AI systems. Th...
- + LockBit Takes Credit for City of Wichita Ransomware Attack—The LockBit cybercrime group has taken credit for the recent ransomware attack that disrupted City of Wichita systems. The post LockBit Takes Credi...
- + CISA Announces CVE Enrichment Project ‘Vulnrichment’—CISA’s Vulnrichment project is adding important information to CVE records to help improve vulnerability management processes. The post CISA Announ...
- + BetterHelp Customers Begin Receiving Refund Notices From $7.8M Data Privacy Settlement, FTC Says—BetterHelp customers have started receiving refund notices from a $7.8 million data privacy settlement, the FTC says. The post BetterHelp Customers...
- + F5 Patches Dangerous Vulnerabilities in BIG-IP Next Central Manager—F5 has patched two potentially serious vulnerabilities in BIG-IP Next that could allow an attacker to take full control of a device. The post F5 Pa...
- + RSA Conference 2024 – Announcements Summary (Day 3)—Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco. The post RSA...
- + Zscaler Investigates Hacking Claims After Data Offered for Sale—Zscaler says its customer, production and corporate environments are not impacted after a notorious hacker offers to sell access. The post Zscaler ...
- + Token Security Raises $7 Million Seed Funding for Machine-First Identity Security—Tel Aviv-based firm emerged from stealth with $7 million seed funding led by TLV Partners with participation from SNR and angel investors. The post ...
- + Shields Up: How to Minimize Ransomware Exposure—Organizations need to look beyond preventive measures when it comes to dealing with today’s ransomware threats and invest in ransomware response. Th...
- + New ‘TunnelVision’ Technique Leaks Traffic From Any VPN System—A new VPN bypass technique allows threat actors to snoop on victims’ traffic by forcing it off the VPN tunnel using built-in features of DHCP. The p...
- + Healthcare Cybersecurity Firm Blackwell Raises $13 Million—Healthcare cybersecurity company Blackwell Security has raised $13 million and appointed Geyer Jones as its first CEO. The post Healthcare Cybersec...
- + Brandywine Realty Trust Hit by Ransomware —Philadelphia-based real estate company Brandywine Realty Trust shuts down systems following a ransomware attack. The post Brandywine Realty Trust H...
- + Android Update Patches Critical Vulnerability—Android’s May 2024 security update patches 38 vulnerabilities, including a critical bug in the System component. The post Android Update Patches Cr...
- + RSA Conference 2024 – Announcements Summary (Day 2)—Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco. The post RSA...
- + University System of Georgia Says 800,000 Impacted by MOVEit Hack—University System of Georgia says Social Security numbers and bank account numbers were compromised in the May 2023 MOVEit hack. The post Universit...
- + The UK Says a Huge Payroll Data Breach by a ‘Malign Actor’ Has Exposed Details of Military Personnel—The UK Ministry of Defense said a breach at a third-party payroll system exposed as many as 272,000 armed forces personnel and veterans. The post ...
- + LockBit Ransomware Mastermind Unmasked, Charged—Charges and sanctions announced against Dimitry Yuryevich Khoroshev, the alleged developer and operator of LockBit ransomware. The post LockBit Ran...
- + TXOne Networks Scores $51M Series B Extension—ICS and OT security startup TXOne Networks secures $51 million in a Series B extension and adds new investors from Taiwan. The post TXOne Networks ...
- + Niobium Raises $5.5M for Zero Trust Computing Hardware Acceleration—Niobium has raised $5.5 million in seed funding for a fully homomorphic encryption (FHE) hardware accelerator designed for zero trust computing. The...
- + Wiz Raises $1 Billion at $12 Billion Valuation—Cloud security giant Wiz has raised $1 billion, which brings the total funding to $1.9 billion, at a valuation of $12 billion. The post Wiz Raises ...
- + Akamai to Acquire API Protection Startup Noname Security for $450 Million —Akamai has announced plans to acquire Noname Security to enhance its API protection offering. The post Akamai to Acquire API Protection Startup Non...
- + RSA Conference 2024 – Announcements Summary (Day 1)—Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco. The post RSA...
- + AT&T Launches New Managed Cybersecurity Services Business LevelBlue—LevelBlue, a new WillJam Ventures and AT&T joint venture, provides various managed cybersecurity services. The post AT&T Launches New Manag...
- + From Warnings to Action: Preparing America’s Infrastructure for Imminent Cyber Threats—As cyber threats grow more sophisticated, America cannot afford complacency. The time for decisive action and enhanced cyber resilience is now. The ...
- + US Releases International Cyberspace Strategy—The US calls for international engagement towards building an open, inclusive, resilient, safe, and equitable digital space. The post US Releases I...
- + Germany Recalls Its Ambassador in Russia for a Week in Protest Over a Hacker Attack—Germany recalled its ambassador to Russia for a week of consultations in Berlin following an alleged hacker attack on Chancellor Olaf Scholz’s party. ...
- + MITRE Hack: China-Linked Group Breached Systems in December 2023—MITRE has shared more details on the recent hack, including the new malware involved in the attack and a timeline of the attacker’s activities. The ...
- + Google Debuts New Security Products, Hyping AI and Mandiant Expertise—Google rolls out new threat-intel and security operations products and looks to the magic of AI to tap into the booming cybersecurity market. The po...
- + Synopsys Sells Software Integrity Business in $2.1 Billion Deal—Synopsys is selling its Software Integrity Group to private equity firms Clearlake Capital and Francisco Partners in a $2.1 billion deal. The post ...
- + Iranian Cyberspies Hit Targets With New Backdoors—Iranian state-sponsored group APT42 is targeting NGOs, government, and intergovernmental organizations with two new backdoors. The post Iranian Cyb...
- + CyberNut Emerges From Stealth With K-12 Security Awareness Training Solution—CyberNut has emerged from stealth mode with a K-12-focused security awareness training solution and $800k in pre-seed funding. The post CyberNut Em...
- + Anetac Emerges From Stealth Mode With $16 Million in Funding—Identity management startup Anetac has emerged from stealth mode with a $16 million investment led by Liberty Global. The post Anetac Emerges From ...
- + US Cyber Command Appoints Morgan Adamski as Executive Director—United States Cyber Command (USCYBERCOM) has named Ms. Morgan M. Adamski as Executive Director effective June 2024. The post US Cyber Command Appoi...
- + Cybersecurity M&A Roundup: 33 Deals Announced in April 2024—Thirty-three cybersecurity-related merger and acquisition (M&A) deals were announced in April 2024. The post Cybersecurity M&A Roundup: 33 ...
- + City of Wichita Shuts Down Network Following Ransomware Attack—The City of Wichita, Kansas, has shut down its network after falling victim to a file-encrypting ransomware attack. The post City of Wichita Shuts ...
- + Permira to Acquire Majority Stake in BioCatch at $1.3 Billion Valuation—Permira has agreed to acquire a majority of BioCatch shares, primarily from Bain Capital Tech Opportunities and Maverick Ventures. The post Permira...
- + French Cyberwarriors Ready to Test Their Defense Against Hackers and Malware During the Olympics—Vincent Strubel, who heads France’s national cybersecurity agency, called the cyberthreats level facing the Olympic Games unprecedented. The post F...
- + German Foreign Minister Says Russia will Face Consequences for Monthslong Cyber Espionage—Germany accused Russian military agents of hacking the top echelons of Chancellor Olaf Scholz’s party and other government and industrial targets. T...
- + Microsoft Overhauls Cybersecurity Strategy After Scathing CSRB Report—Microsoft security chief Charlie Bell pledges significant reforms and a strategic shift to prioritize security above all other product features. The...
- + LayerX Raises $26 Million for Browser Security Platform—Israeli startup LayerX Security banks $25 million in new financing as investors continue to pour money into secure web browsing technologies. The po...
- + US Says North Korean Hackers Exploiting Weak DMARC Settings —The US government warns of a North Korean threat actor abusing weak email DMARC settings to hide spear-phishing attacks. The post US Says North Kor...
- + In Other News: Locked Shields 2024, Data Exposure Bugs, NVIDIA Patches—Noteworthy stories that might have slipped under the radar: 4,000 take part in Locked Shields 2024 exercise, Qantas and JP Morgan hit by data exposure...
- + Botnet Disrupted by FBI Still Used by Russian Spies, Cybercriminals—A botnet dismantled in January and used by Russia-linked APT28 consisted of more than just Ubiquiti Edge OS routers. The post Botnet Disrupted by F...
- + CISA, FBI Urge Organizations to Eliminate Path Traversal Vulnerabilities—CISA and the FBI warn of threat actors abusing path traversal software vulnerabilities in attacks targeting critical infrastructure. The post CISA,...
- + ArcaneDoor Espionage Campaign Targeting Cisco Firewalls Linked to China—An analysis of IoCs suggests that a Chinese threat group may be behind the recent ArcaneDoor espionage campaign targeting Cisco firewalls. The post ...
- + Horizon3.ai Introduces AI-Assisted Service to Prioritize and Patch Vulnerabilities Faster—SaaS-based, AI-assisted penetration service allows proactive defensive action against exploitation of new vulnerabilities. The post Horizon3.ai Int...
- + Microsoft Warns of ‘Dirty Stream’ Vulnerability in Popular Android Apps—Microsoft has uncovered a new type of attack called Dirty Stream that impacted Android apps with billions of installations. The post Microsoft War...
- + White House Issues National Security Memorandum for Critical Infrastructure—The White House has published a national security memorandum focusing on critical infrastructure security and resilience. The post White House Issu...
- + Ukrainian REvil Ransomware Affiliate Gets 13 Years in US Prison—Yaroslav Vasinskyi was sentenced to 13 years and seven months in prison for his alleged role in the REvil ransomware operation. The post Ukrainian ...
- + Ransomware Defense Startup Mimic Raises Hefty $27M Seed Round —A new Silicon Valley startup called Mimic is coming out of the shadows with a hefty $27 million seed-stage funding round led by Ballistic Ventures. ...
- + Building the Right Vendor Ecosystem – a Guide to Making the Most of RSA Conference—As you look to navigate RSA Conference, with so many vendors, approaches and solutions, how do you know what solutions you should be investing in? ...
- + AI Security Startup Apex Emerges From Stealth With Funding From OpenAI CEO—Israeli AI security firm Apex has received $7 million in seed funding for its detection, investigation, and response platform. The post AI Security...
- + Startup Dealflow: New Investments at Resonance, RunReveal, StepSecurity, Insane Cyber—Cybersecurity startups Insane Cyber, Resonance Security, RunReveal and StepSecurity announce pre-seed, early-stage, and seed funding rounds. The pos...
- + Network Security Firm Corelight Raises $150 Million—Network detection and response (NDR) provider Corelight has raised $150 million in a Series D funding round led by Accel. The post Network Security...
- + Verizon DBIR 2024 Shows Surge in Vulnerability Exploitation, Confirmed Data Breaches —Verizon’s 2024 DBIR shows that vulnerability exploitation increased three times and confirmed data breaches doubled compared to the previous year. T...
- + Japan’s Kishida Unveils a Framework for Global Regulation of Generative AI—Japan's Prime Minister unveiled an international framework for regulation and use of generative AI, adding to global efforts on governance for the rap...
- + 1,400 GitLab Servers Impacted by Exploited Vulnerability—CISA says a critical GitLab password reset flaw is being exploited in attacks and roughly 1,400 servers have not been patched. The post 1,400 GitLa...
- + Russian Hackers Target Industrial Systems in North America, Europe—Government agencies are sharing recommendations following attacks claimed by pro-Russian hacktivists on ICS/OT systems. The post Russian Hackers Ta...
- + Hackers Compromised Dropbox eSignature Service—Dropbox says hackers breached its Sign production environment and accessed customer email addresses and hashed passwords. The post Hackers Comprom...
- + Dropbox Data Breach Impacts Customer Information—Dropbox says hackers breached its Sign production environment and accessed customer email addresses and hashed passwords. The post Dropbox Data Br...
- + Change Healthcare Cyberattack Was Due to a Lack of Multifactor Authentication, UnitedHealth CEO says—UnitedHealth CEO Andrew Witty said in a U.S. Senate hearing that his company is still trying to understand why the server did not have the additional ...
- + Deepfake of Principal’s Voice Is the Latest Case of AI Being Used for Harm—Everyone — not just politicians and celebrities — should be concerned about this increasingly powerful deep-fake technology, experts say. The post ...
- + Oasis Security Raises $35 Million to Tackle Non-Human Identity Management—New York startup Oasis Security banks $35 million in a Series A extension round led by Accel, Cyberstarts, and Sequoia Capital. The post Oasis Secu...
- + Traceable AI Raises $30 Million to Safeguard Cloud APIs—Traceable AI has raised $110 million since launching in 2018 with ambitious plans in the competitive API security and observability space. The pos...
- + Google Boosts Bug Bounty Payouts Tenfold in Mobile App Security Push—Researchers can earn as much as $450,000 for a single vulnerability report as Google boosts its mobile vulnerability rewards program. The post Goog...
- + Adobe Adds Content Credentials and Firefly to Bug Bounty Program—Adobe is providing incentives for bug bounty hackers to report security flaws in its implementation of Content Credentials and Adobe Firefly. The po...
- + Cuttlefish Malware Targets Routers, Harvests Cloud Authentication Data —Cuttlefish malware platform roaming around enterprise SOHO routers capable of covertly harvesting public cloud authentication data from internet traff...
- + Machine Identity Firm Venafi Readies for the 90-day Certificate Lifecycle—Venafi introduced a 90-Day TLS Readiness solution to help enterprises prepare for Google’s proposed 90-day limit for the lifecycle of a digital certif...
- + DeepKeep Launches AI-Native Security Platform With $10 Million in Seed Funding—AI-Native Trust, Risk, and Security Management (TRiSM) startup DeepKeep raises $10 million in seed funding. The post DeepKeep Launches AI-Native Se...
- + CISO Conversations: LinkedIn’s Geoff Belknap and Meta’s Guy Rosen—SecurityWeek interviews Geoff Belknap, CISO at LinkedIn, and Guy Rosen, CISO at Facebook parent company Meta. The post CISO Conversations: LinkedIn...
- + CISO Conversations: Talking Cybersecurity With LinkedIn’s Geoff Belknap and Meta’s Guy Rosen—SecurityWeek interviews Geoff Belknap, CISO at LinkedIn, and Guy Rosen, CISO at Facebook parent company Meta. The post CISO Conversations: Talking ...
- + Wpeeper Android Trojan Uses Compromised WordPress Sites to Shield Command-and-Control Server—The new Wpeeper Android trojan ceased operations after a week and has zero detections in VirusTotal. The post Wpeeper Android Trojan Uses Compromis...
- + UnitedHealth CEO Says Hackers Lurked in Network for Nine Days Before Ransomware Strike—UnitedHealth Group’s CEO Andrew Witty shares details on the damaging cyberattack in testimony before a US Congress committee set for May 1, 2024. Th...
- + Finnish Hacker Gets Prison for Accessing Thousands of Psychotherapy Records and Demanding Ransoms—In February 2023, French police arrested well-known Finnish hacker Aleksanteri Kivimäki, who was living under a false identity near Paris. He was depo...
- + Docker Hub Users Targeted With Imageless, Malicious Repositories—JFrog raises an alarm after finding three large-scale malware campaigns targeting Docker Hub with imageless repositories. The post Docker Hub Users...
- + Critical Vulnerabilities in Judge0 Lead to Sandbox Escape, Host Takeover—Three vulnerabilities in the Judge0 open source service could allow attackers to escape the sandbox and obtain root privileges on the host. The post...
- + Apptega Raises $15 Million for Cybersecurity Compliance Platform—Mainsail Partners leads a $15 million financing round for end-to-end cybersecurity compliance platform company Apptega. The post Apptega Raises $15...
- + Island Secures $175M Investment as Enterprise Browser Startups Defy Tech Giants—Despite competitive pressures from industry behemoths like Microsoft and Google, investors are still betting big on startups in the specialized enterp...
- + Chinese Hackers Have Been Probing DNS Networks Globally for Years: Report—While China-linked Muddling Meerkat’s operations look like DNS DDoS attacks, it seems unlikely that denial of service is their goal, at least in the n...
- + FCC Fines Wireless Carriers for Sharing User Locations Without Consent—The Federal Communications Commission leveraged nearly $200 million in fines against wireless carriers AT&T, Sprint, T-Mobile and Verizon for ille...
- + SafeBase Scores $33M Series B Investment—SafeBase has raised north of $50 million since launching in 2020 with plans to simplify vendor risk assessment disclosures. The post SafeBase Score...
- + Vulnerability in R Programming Language Could Fuel Supply Chain Attacks—A vulnerability (CVE-2024-27322) in the R programming language implementation can be exploited to execute arbitrary and be used as part of a supply ch...
- + Why Using Microsoft Copilot Could Amplify Existing Data Quality and Privacy Issues—Microsoft provides an easy and logical first step into GenAI for many organizations, but beware of the pitfalls. The post Why Using Microsoft Copil...
- + Tech CEOs Altman, Nadella, Pichai and Others Join Government AI Safety Board Led by DHS’ Mayorkas—CEOs of major tech companies are joining a new artificial intelligence safety board to advise the federal government on how to protect the nation’s cr...
- + CISA Rolls Out New Guidelines to Mitigate AI Risks to US Critical Infrastructure—New CISA guidelines categorize AI risks into three significant types and pushes a four-part mitigation strategy. The post CISA Rolls Out New Guidel...
- + How TikTok Grew From a Fun App for Teens Into a Potential National Security Threat—History of TikTok and how it many view it as a national security threat. The post How TikTok Grew From a Fun App for Teens Into a Potential Nationa...
- + Google Says it Blocked 2.28 Million Apps from Google Play Store—In 2023, Google said it blocked 2.28 million bad applications from being published on Google Play and banned 333,000 developer accounts. The post G...
- + Should Cybersecurity Leadership Finally be Professionalized?—The majority opinion is that a cybersecurity professional body is long overdue and would benefit cybersecurity and cybersecurity practitioners. The ...
- + Kaiser Permanente Data Breach Impacts 13.4 Million Patients—US healthcare giant is warning millions of current and former patients that their personal information was exposed to third-party advertisers. The p...
- + Beyond the Buzz: Rethinking Alcohol as a Cybersecurity Bonding Ritual—Jennifer Leggio makes the case for more alcohol-free networking events at conferences, and community-building opportunities for sober individuals work...
- + Honeywell: USB Malware Attacks on Industrial Orgs Becoming More Sophisticated—An analysis conducted by Honeywell shows that much of the USB-borne malware targeting industrial organizations can still cause OT disruption. The po...
- + Okta Warns of Credential Stuffing Attacks Using Tor, Residential Proxies—Okta warned of a spike in credential stuffing attacks using anonymizing services such as Tor, DataImpulse, Luminati, and NSocks. The post Okta Warn...
- + Collection Agency FBCS Says Data Breach Exposed Nearly 2 million People—Financial Business and Consumer Solutions (FBCS) says compromised information may include names, dates of birth, Social Security numbers, and account ...
- + Hackers Claim to Have Infiltrated Belarus’ Main Security Service—A Belarusian hacker activist group claims to have infiltrated the network of the country’s main KGB security agency and accessed personnel files of ov...
- + Powerful ‘Brokewell’ Android Trojan Allows Attackers to Takeover Devices—A new Android trojan named Brokewell can steal user’s sensitive information and allows attackers to take over devices. The post Powerful ‘Bro...
- + Over 1,400 CrushFTP Instances Vulnerable to Exploited Zero-Day—More than 1,400 CrushFTP servers remain vulnerable to an actively exploited zero-day for which PoC has been published. The post Over 1,400 CrushFTP...
- + Self-Spreading PlugX USB Drive Malware Plagues Over 90k IP Addresses—More than 90,000 unique IPs are still infected with a PlugX worm variant that spreads via infected flash drives. The post Self-Spreading PlugX USB ...
- + In Other News: China Hacked Volkswagen, DDoS Service Shutdown, Rubrik IPO—Noteworthy stories that might have slipped under the radar: Volkswagen hacked by Chinese threat group, DDoS service shut down, Rubrik IPO. The post ...
- + Darktrace to be Taken Private in $5.3 Billion Sale to Thoma Bravo—UK cybersecurity firm Darktace has agreed to sell itself to private equity giant Thoma Bravo for approximately $5.32 million in cash. The post Dark...
- + Critical WordPress Automatic Plugin Vulnerability Exploited to Inject Backdoors—A vulnerability in the WordPress Automatic plugin is being exploited to inject backdoors and web shells into websites. The post Critical WordPress ...
- + Predictive Security Startup BforeAI Raises $15 Million—Predictive attack intelligence and risk protection startup BforeAI has raised $15 million in a Series A funding round led by SYN Ventures. The post ...
- + Palo Alto Networks Shares Remediation Advice for Hacked Firewalls—Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400. The post Palo Alto Net...
- + Autodesk Drive Abused in Phishing Attacks —A new phishing campaign abuses compromised email accounts and targets corporate users with PDF files hosted on Autodesk Drive. The post Autodesk Dr...
- + FTC Sending $5.6 Million in Refunds to Ring Customers Over Security Failures—The FTC is sending a total of $5.6 million in refunds to over 117,000 Ring customers as result of a 2023 settlement. The post FTC Sending $5.6 Mill...
- + Vulnerabilities Expose Brocade SAN Appliances, Switches to Hacking—The Brocade SANnav management application is affected by multiple vulnerabilities, including a publicly available root password. The post Vulnerabi...
- + Endpoint Security Firm ThreatLocker Raises $115 Million in Series D Funding—Zero trust endpoint security company ThreatLocker has announced a $115 million Series D funding round that brings the total to $240 million. The po...
- + IBM Acquiring HashiCorp for $6.4 Billion—IBM is acquiring HashiCorp for $6.4 billion for its infrastructure lifecycle management and security lifecycle management capabilities. The post IB...
- + Cisco Systems Joins Microsoft, IBM in Vatican Pledge to Ensure Ethical Use and Development of AI—Pope Francis has called for an international treaty to ensure AI is developed and used ethically, devoting his annual peace message this year to the t...
- + Cisco Raises Alarm for ‘ArcaneDoor’ Zero-Days Hitting ASA Firewall Platforms—Cisco warns that nation state-backed hackers are exploiting at least two zero-day vulnerabilities in its ASA firewall platforms to plant malware on te...
- + KnowBe4 Plans to Acquire Egress for Email Security Tech—KnowBe4 boasts that the merger will create “the largest, advanced AI-driven cybersecurity platform for managing human risk.” The post KnowBe4 Plans...
- + Navigating Vendor Speak: A Security Practitioner’s Guide to Seeing Through the Jargon—As a security industry, we need to focus our energies on those professionals among us who know how to walk the walk. The post Navigating Vendor Spe...
- + North Korean Hackers Hijack Antivirus Updates for Malware Delivery—A North Korea-linked threat actor hijacked the update mechanism of eScan antivirus to deploy backdoors and cryptocurrency miners. The post North Ko...
- + Tines Bags $50 Million Funding for Security Workflow Automation—Irish startup Tines raises $50 million in new venture capital funding as investors make big bets on automation and orchestration startups. The post ...
- + Google Patches Critical Chrome Vulnerability—Google patches CVE-2024-4058, a critical Chrome vulnerability for which researchers earned a $16,000 reward. The post Google Patches Critical Chro...
- + Amplifier Security Emerges From Stealth With AI Copilot, Human-in-the-Loop Automation—Amplifier Security has raised $3.3 million in funding for a solution that includes human-in-the-loop automation and an AI copilot. The post Amplifi...
- + Nagomi Security Emerges From Stealth With $30 Million in Funding—Nagomi Security, a company that helps customers prevent threats by leveraging existing security tools, emerged from stealth with $30 million in fundin...
- + CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation—CISA warns organizations of a two-year-old Windows Print Spooler vulnerability being exploited in the wild. The post CISA Warns of Windows Print Sp...
- + Threat Actor Uses Multiple Infostealers in Global Campaign—A threat actor tracked as CoralRaider has been using multiple infostealers to harvest credentials from users worldwide. The post Threat Actor Uses ...
- + $10 Million Bounty on Iranian Hackers for Cyberattacks on US Gov, Defense Contractors—Four Iranians are accused of hacking into critical systems at the Departments of Treasury and State and dozens of private US companies. The post $1...
- + $10 Million Bounty on Iranian Hackers for Cyber Attacks on US Gov, Defense Contractors—Four Iranians are accused of hacking into critical systems at the Departments of Treasury and State and dozens of private US companies. The post $1...
- + Spain Reopens a Probe Into a Pegasus Spyware Case After a French Request to Work Together—The judge with Spain’s National Court said there is reason to believe that the new information provided by France can “allow the investigations to adv...
- + The Battle Continues: Mandiant Report Shows Improved Detection But Persistent Adversarial Success—Mandiant's M-Trends 2024 report shows that defenses are improving – and that may be true. But the reality remains that these same statistics demonstra...
- + Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations —Russia-linked APT28 deploys the GooseEgg post-exploitation tool against numerous US and European organizations. The post Russian Cyberspies Deliver...
- + UnitedHealth Says Patient Data Exposed in Change Healthcare Cyberattack—UnitedHealth confirms that personal and health information was stolen in a ransomware attack that could cost the company up to $1.6 billion. The pos...
- + Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability—Palo Alto Networks firewall vulnerability CVE-2024-3400, exploited as a zero-day, impacts a Siemens industrial product. The post Siemens Industrial...
- + Ransomware Gang Leaks Data Allegedly Stolen From Government Contractor—The LockBit ransomware gang leaks data allegedly stolen from government contractor Tyler Technologies. The post Ransomware Gang Leaks Data Allegedl...
- + Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services—Microsoft PlayReady vulnerabilities that could allow rogue subscribers to illegally download movies from popular streaming services. The post Micro...
- + Research Shows How Attackers Can Abuse EDR Security Products—Vulnerabilities in Palo Alto Networks Cortex XDR allowed a security researcher to turn it into a malicious offensive tool. The post Research Shows ...
- + Rural Texas Towns Report Cyberattacks That Caused One Water System to Overflow—A hack that caused a small Texas town’s water system to overflow in January has been linked to a shadowy Russian hacktivist group, the latest case of ...
- + CrushFTP Patches Exploited Zero-Day Vulnerability—CrushFTP patches a zero-day vulnerability allowing unauthenticated attackers to escape the VFS and retrieve system files. The post CrushFTP Patches...
- + Thousands of Palo Alto Firewalls Potentially Impacted by Exploited Vulnerability —Shadowserver has identified roughly 6,000 internet-accessible Palo Alto Networks firewalls potentially vulnerable to CVE-2024-3400. The post Thousa...
- + MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days—MITRE R&D network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability. The post MITRE Hac...
- + Cannes Hospital Cancels Medical Procedures Following Cyberattack—Cannes Hospital Centre – Simone Veil cancels medical procedures after shutting down systems in response to a cyberattack. The post Cannes Hospital ...
- + BreachRx Raises $6.5M to Revamp Incident Response Reporting Systems—Investors make an early-stage $6.5 million bet on BreachRx, a startup promising to shield cybersecurity executives from personal liability. The post...
- + Threat-Intelligence Startup VulnCheck Closes $8M Seed Financing—VulnCheck banks $8 million in early stage capital to build 'exploit intelligence' technologies and services. The post Threat-Intelligence Startup...
- + In Other News: OSS Backdooring Attempts, Botnet Operator Charged, Automotive Firm Attack—Noteworthy stories that might have slipped under the radar: OpenSSF and OpenJS incidents similar to XZ backdoor, Moldovan botnet operator charged, US ...
- + First Major Attempts to Regulate AI Face Headwinds From All Sides—While over 400 AI-related bills are being debated this year in statehouses nationwide, most target one industry or just a piece of the technology — su...
- + US Government Releases Guidance on Securing Election Infrastructure—New US guidance details foreign malign influence operations to help election infrastructure stakeholders increase resilience. The post US Governmen...
- + Akira Ransomware Made Over $42 Million in One Year: Agencies—Akira ransomware has hit over 250 organizations worldwide and received over $42 million in ransom payments. The post Akira Ransomware Made Over $42...
- + Frontier Communications Shuts Down Systems Following Cyberattack—Telecom giant Frontier shuts down systems to contain a cyberattack that led to personal information compromise. The post Frontier Communications Sh...
- + OpenMetadata Vulnerabilities Exploited to Abuse Kubernetes Clusters for Cryptomining —Microsoft warns that several OpenMetadata vulnerabilities are being exploited to deploy cryptomining malware to Kubernetes environments. The post O...
- + SAP Applications Increasingly in Attacker Crosshairs, Report Shows—Malicious hackers are targeting SAP applications at an alarming pace, according to warnings from Onapsis and Flashpoint. The post SAP Applications ...
- + Watch Now: Ransomware Resilience & Recovery Summit Sessions Now on Demand—Join this one-day virtual summit as we shine the spotlight on the shadowy dynamics of ransomware attacks and how you can best prepare your organizatio...
- + Multi-Data Platform SIEM Anvilogic Raises $45 Million—Silicon Valley startup Anvilogic has raised $45 million in a Series C funding round led by Evolution Equity Partners. The post Multi-Data Platform ...
- + United Nations Agency Investigating Ransomware Attack Involving Data Theft—United Nations Development Programme (UNDP) investigating a ransomware attack in which hackers stole sensitive data. The post United Nations Agency...
- + Five Eyes Agencies Release New AI Security Guidance—Five Eyes cybersecurity agencies have released joint guidance on securely deploying and operating AI systems. The post Five Eyes Agencies Release ...
- + Cisco Says PoC Exploit Available for Newly Patched IMC Vulnerability—Cisco patches a high-severity Integrated Management Controller vulnerability for which PoC exploit code is available. The post Cisco Says PoC Explo...
- + 180k Impacted by Data Breach at Michigan Healthcare Organization—Cherry Health says the personal information of over 180,000 individuals was stolen in a ransomware attack. The post 180k Impacted by Data Breach at...
- + Phishing Platform LabHost Shut Down by Law Enforcement—LabHost, a major phishing-as-a-service platform, has been shut down as part of a major law enforcement operation. The post Phishing Platform LabHo...
- + Cisco Unveils AI-Native Enterprise Security Solution Hypershield—Cisco announces Hypershield, an AI-native and cloud-native enterprise security solution with a wide range of capabilities. The post Cisco Unveils A...
- + Kapeka: A New Backdoor in Sandworm’s Arsenal of Aggression—Kapeka is a new backdoor that may be a new addition to Russia-link Sandworm’s malware arsenal and possibly a successor to GreyEnergy. The post Kape...
- + Miggo Security Gets $7.5 Million Seed Funding to Build ADR Technology—YL Ventures leads an early stage funding round for Miggo Security, a Tel Aviv startup working on application detection and response technology. The ...
- + Armis Acquires Silk Security for $150 Million—Armis has acquired cyber risk prioritization and remediation company Silk Security for $150 million. The post Armis Acquires Silk Security for $15...
- + Cisco: Multiple VPN, SSH Services Targeted in Mass Brute-Force Attacks—Cisco has observed an increase in brute-force attacks targeting web application authentication, VPNs, and SSH services. The post Cisco: Multiple VP...
- + Ivanti Patches 27 Vulnerabilities in Avalanche MDM Product—Ivanti releases patches for 27 vulnerabilities in the Avalanche MDM product, including critical flaws leading to command execution. The post Ivanti...
- + Virtual Event Today: Ransomware Resilience & Recovery Summit —Join this one-day virtual summit as we shine the spotlight on the shadowy dynamics of ransomware attacks and how you can best prepare your organizatio...
- + Chrome 124, Firefox 125 Patch High-Severity Vulnerabilities—Chrome and Firefox security updates resolve over 35 vulnerabilities, including a dozen high-severity bugs. The post Chrome 124, Firefox 125 Patch H...
- + Recent OT and Espionage Attacks Linked to Russia’s Sandworm, Now Named APT44—Mandiant summarizes some of the latest operations of Russia’s notorious Sandworm group, which it now tracks as APT44. The post Recent OT and Espion...
- + Oracle Patches 230 Vulnerabilities With April 2024 CPU—Oracle releases 441 new security patches to address 230 vulnerabilities as part of its April 2024 Critical Patch Update. The post Oracle Patches 23...
- + Exploitation of Palo Alto Firewall Vulnerability Picking Up After PoC Release—Palo Alto Networks firewall vulnerability CVE-2024-3400 increasingly exploited after PoC code has been released. The post Exploitation of Palo Alt...
- + Virtual Event Tomorrow: Ransomware Resilience & Recovery Summit —Join this one-day virtual summit as we shine the spotlight on the shadowy dynamics of ransomware attacks and how you can best prepare your organizatio...
- + Critical PuTTY Vulnerability Allows Secret Key Recovery—PuTTY vulnerability CVE-2024-31497 allows attackers to compromise private keys and use them to forge signatures. The post Critical PuTTY Vulnerabi...
- + Cryptojacker Arrested, Charged for Defrauding Cloud Providers of $3.5 Million—Charles O. Parks III was arrested and charged with defrauding two cloud-services providers of $3.5 million. The post Cryptojacker Arrested, Charged...
- + Cloud Users Warned of Data Exposure Risk From Command-Line Tools—Cloud security specialists found data exposure risk associated with Azure, AWS, and Google Cloud command-line tools. The post Cloud Users Warned of...
- + Hacker Conversations: Kevin O’Connor, From Childhood Hacker to NSA Operative—Kevin O’Connor knew he was a hacker by the time he was in Middle School. He went on to work for the NSA and is now director of threat research at Adlu...
- + Ransomware Group Starts Leaking Data Allegedly Stolen From Change Healthcare—The RansomHub group has started leaking information allegedly stolen from Change Healthcare in February 2024. The post Ransomware Group Starts Leak...
- + You Against the World: The Offenders Dilemma—Foreign attackers have many more toolsets at their disposal, so we need to make sure we’re selective about our modeling, preparation and how we assess...
- + Omni Hotels Says Personal Information Stolen in Ransomware Attack—Omni Hotels says customer information was compromised in a cyberattack claimed by the Daixin Team ransomware group. The post Omni Hotels Says Perso...
- + Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt—PAM company Delinea over the weekend rushed to patch a critical authentication bypass vulnerability after it apparently ignored the researcher who fou...
- + Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs—Cisco Duo warns that breach exposed phone numbers, phone carriers, metadata and other logs that could lead to downstream social engineering attacks. ...
- + NightVision Raises $5.4 Million for Application Security Testing—NightVision, an early stage startup in the application security testing space, has raised $5.4 million in seed funding. The post NightVision Raises...
- + Ransomware Group Claims Theft of Data From Chipmaker Nexperia —The Dark Angels (Dunghill) ransomware group claims to have stolen 1 Tb of data from Nexperia, which is investigating the incident. The post Ransomw...
- + Juniper Networks Publishes Dozens of New Security Advisories—Juniper Networks patches dozens of vulnerabilities in Junos OS, Junos OS Evolved, and other products. The post Juniper Networks Publishes Dozens of...
- + Destructive ICS Malware ‘Fuxnet’ Used by Ukraine Against Russian Infrastructure—ICS malware Fuxnet allegedly used by Ukrainian Blackjack group to disrupt industrial sensors and other systems belonging to a Moscow infrastructure fi...
- + Two People Arrested in Australia and US for Development and Sale of Hive RAT—Authorities in Australia and the US have arrested and charged two individuals for developing and selling the Hive RAT. The post Two People Arrested...
- + Former Security Engineer Sentenced to Prison for Hacking Crypto Exchanges—Former security engineer Shakeeb Ahmed was sentenced to prison for hacking and defrauding cryptocurrency exchanges. The post Former Security Engine...
- + Palo Alto Networks Releases Fixes for Firewall Zero-Day as Attribution Attempts Emerge—Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus. The pos...
- + Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge—Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus. The pos...
As of 5/16/24 7:56am. Last new 5/16/24 7:56am. Score: 235
- Next feed in category: Schneier on Security