Source: www.securityweek.com – Author: Eduard Kovacs A China-linked cyberspy group appears to be behind a campaign targeting industrial organizations in Eastern Europe, cybersecurity firm Kaspersky reported...
Author:
Google Creates Red Team to Test Attacks Against AI Systems – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Google has created a red team that focuses on artificial intelligence (AI) systems and it has published a report providing...
VirusTotal Provides Clarifications on Data Leak Affecting Premium Accounts – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs VirusTotal on Friday provided clarifications on the recent data leak that resulted in the exposure of information on 5,600 of...
New AMI BMC Flaws Allowing Takeover and Physical Damage Could Impact Millions of Devices – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Firmware and hardware security company Eclypsium has disclosed information on two new vulnerabilities found by its researchers in the American...
Cosmetics Giant Estée Lauder Targeted by Two Ransomware Groups – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Cosmetics giant Estée Lauder has disclosed a data breach just as two ransomware groups made claims about stealing vast amounts...
Adobe Releases New Patches for Exploited ColdFusion Vulnerabilities – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Adobe has released a second round of patches for some recently disclosed ColdFusion vulnerabilities, including flaws that appear to have...
Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Over a dozen vulnerabilities patched recently by GE in its Cimplicity product are reminiscent of industrial control system (ICS) attacks...
Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Citrix on Tuesday announced patches for three vulnerabilities, including an actively exploited zero-day that allows remote code execution. The zero-day,...
Nigerian Man Sentenced to 8 Years in US Prison for $8 Million BEC Scheme – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs A Nigerian national who had been living in the United Arab Emirates has been sentenced to more than eight years...
Two New Adobe ColdFusion Vulnerabilities Exploited in Attacks – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs At least two recently disclosed Adobe ColdFusion vulnerabilities appear to have been exploited in the wild, including a flaw that...
Chinese Cyberspies Used Forged Authentication Tokens to Hack Government Emails – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Microsoft reported on Tuesday that a Chinese cyberespionage group it tracks as Storm-0558 was recently spotted using forged authentication tokens...
Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs After being notified by several security firms, Microsoft has revoked many signed drivers that had been leveraged by threat actors,...
ICS Patch Tuesday: Siemens, Schneider Electric Fix 50 Vulnerabilities – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Siemens and Schneider Electric on Tuesday released a total of nine new security advisories addressing a total of 50 vulnerabilities...
Honeywell Boosting OT Cybersecurity Offering With Acquisition of SCADAfence – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Industrial giant Honeywell wants to extend its operational technology (OT) cybersecurity portfolio with the acquisition of Tel Aviv, Israel-based OT...
Former Contractor Employee Charged for Hacking California Water Treatment Facility – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs A 53-year-old man from Tracy, California, has been charged for allegedly hacking into the systems of a water treatment facility...
Vulnerabilities in PiiGAB Product Could Expose Industrial Organizations to Attacks – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Potentially serious vulnerabilities discovered by researchers in a PiiGAB product could expose industrial organizations to remote hacker attacks. PiiGAB is...
JumpCloud Says All API Keys Invalidated to Protect Customers – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Device, identity and access management solutions provider JumpCloud has reset customer API keys in response to an “ongoing incident”. JumpCloud...
Shell Confirms MOVEit-Related Breach After Ransomware Group Leaks Data – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Energy giant Shell has confirmed that personal information belonging to employees has been compromised as a result of the recent...
StackRot Linux Kernel Vulnerability Shows Exploitability of UAFBR Bugs – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs A researcher has disclosed a Linux kernel vulnerability that he claims is the first to demonstrate that a type of...
Exploited Solar Power Product Vulnerability Could Expose Energy Organizations to Attacks – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Hundreds of energy organizations could be exposed to attacks due to an actively exploited vulnerability affecting a solar power monitoring...
Cybersecurity M&A Roundup: 23 Deals Announced in June 2023 – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Twenty-three cybersecurity-related merger and acquisition (M&A) deals were announced in June 2023. An analysis conducted by SecurityWeek shows that more...
Samsung Phone Flaws Added to CISA ‘Must Patch’ List Likely Exploited by Spyware Vendor – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs The US Cybersecurity and Infrastructure Security Agency (CISA) has added half a dozen flaws affecting Samsung smartphones to its Known...
TSMC Says Supplier Hacked After Ransomware Group Claims Attack on Chip Giant – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs The LockBit ransomware group claims to have hacked Taiwan Semiconductor Manufacturing Company (TSMC), but the chip giant says only one...
Details Disclosed for Critical SAP Vulnerabilities, Including Wormable Exploit Chain – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs A cybersecurity firm has disclosed the details of critical SAP vulnerabilities, including a wormable exploit chain, that can expose organizations...
White House Outlines Cybersecurity Budget Priorities for Fiscal 2025 – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs The White House this week released a memorandum outlining the administration’s proposed cybersecurity budget priorities for government departments and agencies...
Astrix Raises $25 Million to Help Enterprises Secure App-to-App Connections – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Astrix Security, an Israel-based company that specializes in securing app-to-app connections, announced on Wednesday that is has raised $25 million...
Siemens Energy, Schneider Electric Targeted by Ransomware Group in MOVEit Attack – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Energy giants Schneider Electric and Siemens Energy have confirmed being targeted by a ransomware group in the recent campaign exploiting...
BeeKeeperAI Platform for AI Development on Sensitive Data Receives $12M in Funding – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs San Francisco-based BeeKeeperAI has raised $12.1 million in Series A funding for a secure collaboration platform designed for AI development...
Socure Acquires ID Verification Company Berbix for $70 Million – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Nevada-based identity verification solutions provider Socure announced on Tuesday that it has acquired California-based automated ID verification firm Berbix for...
Gas Stations Impacted by Cyberattack on Canadian Energy Giant Suncor – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Some services at Petro-Canada gas stations have been disrupted following a cyberattack on parent company Suncor, one of the largest...