Join this one-day virtual summit as we shine the spotlight on the shadowy dynamics of ransomware attacks and how you can best prepare your organization to defend against and recover from these relentless attacks.

The post Watch Now: Ransomware Resilience & Recovery Summit Sessions Now on Demand appeared first on SecurityWeek.

Palo Alto Networks firewall vulnerability CVE-2024-3400 increasingly exploited after PoC code has been released. 

The post Exploitation of Palo Alto Firewall Vulnerability Picking Up After PoC Release appeared first on SecurityWeek.

Oracle releases 441 new security patches to address 230 vulnerabilities as part of its April 2024 Critical Patch Update.

The post Oracle Patches 230 Vulnerabilities With April 2024 CPU appeared first on SecurityWeek.

Mandiant summarizes some of the latest operations of Russia’s notorious Sandworm group, which it now tracks as APT44.

The post Recent OT and Espionage Attacks Linked to Russia’s Sandworm, Now Named APT44 appeared first on SecurityWeek.

Chrome and Firefox security updates resolve over 35 vulnerabilities, including a dozen high-severity bugs.

The post Chrome 124, Firefox 125 Patch High-Severity Vulnerabilities appeared first on SecurityWeek.

Ivanti releases patches for 27 vulnerabilities in the Avalanche MDM product, including critical flaws leading to command execution.

The post Ivanti Patches 27 Vulnerabilities in Avalanche MDM Product appeared first on SecurityWeek.

Cisco has observed an increase in brute-force attacks targeting web application authentication, VPNs, and SSH services.

The post Cisco: Multiple VPN, SSH Services Targeted in Mass Brute-Force Attacks appeared first on SecurityWeek.

Armis has acquired cyber risk prioritization and remediation company Silk Security for $150 million. 

The post Armis Acquires Silk Security for $150 Million appeared first on SecurityWeek.

YL Ventures leads an early stage funding round for Miggo Security, a Tel Aviv startup working on application detection and response technology.

The post Miggo Security Gets $7.5 Million Seed Funding to Build ADR Technology appeared first on SecurityWeek.

Kapeka is a new backdoor that may be a new addition to Russia-link Sandworm’s malware arsenal and possibly a successor to GreyEnergy.

The post Kapeka: A New Backdoor in Sandworm’s Arsenal of Aggression appeared first on SecurityWeek.

Cisco announces Hypershield, an AI-native and cloud-native enterprise security solution with a wide range of capabilities.

The post Cisco Unveils AI-Native Enterprise Security Solution Hypershield appeared first on SecurityWeek.

LabHost, a major phishing-as-a-service platform, has been shut down as part of a major law enforcement operation. 

The post Phishing Platform LabHost Shut Down by Law Enforcement appeared first on SecurityWeek.

Cherry Health says the personal information of over 180,000 individuals was stolen in a ransomware attack.

The post 180k Impacted by Data Breach at Michigan Healthcare Organization appeared first on SecurityWeek.

Cisco patches a high-severity Integrated Management Controller vulnerability for which PoC exploit code is available.

The post Cisco Says PoC Exploit Available for Newly Patched IMC Vulnerability appeared first on SecurityWeek.

Five Eyes cybersecurity agencies have released joint guidance on securely deploying and operating AI systems. 

The post Five Eyes Agencies Release New AI Security Guidance appeared first on SecurityWeek.

United Nations Development Programme (UNDP) investigating a ransomware attack in which hackers stole sensitive data.

The post United Nations Agency Investigating Ransomware Attack Involving Data Theft appeared first on SecurityWeek.

Silicon Valley startup Anvilogic has raised $45 million in a Series C funding round led by Evolution Equity Partners.

The post Multi-Data Platform SIEM Anvilogic Raises $45 Million appeared first on SecurityWeek.

Malicious hackers are targeting SAP applications at an alarming pace, according to warnings from Onapsis and Flashpoint.

The post SAP Applications Increasingly in Attacker Crosshairs, Report Shows appeared first on SecurityWeek.

Microsoft warns that several OpenMetadata vulnerabilities are being exploited to deploy cryptomining malware to Kubernetes environments.

The post OpenMetadata Vulnerabilities Exploited to Abuse Kubernetes Clusters for Cryptomining   appeared first on SecurityWeek.

Telecom giant Frontier shuts down systems to contain a cyberattack that led to personal information compromise.

The post Frontier Communications Shuts Down Systems Following Cyberattack appeared first on SecurityWeek.

Akira ransomware has hit over 250 organizations worldwide and received over $42 million in ransom payments.

The post Akira Ransomware Made Over $42 Million in One Year: Agencies appeared first on SecurityWeek.

New US guidance details foreign malign influence operations to help election infrastructure stakeholders increase resilience.

The post US Government Releases Guidance on Securing Election Infrastructure appeared first on SecurityWeek.

While over 400 AI-related bills are being debated this year in statehouses nationwide, most target one industry or just a piece of the technology — such as deepfakes used in elections.

The post First Major Attempts to Regulate AI Face Headwinds From All Sides appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: OpenSSF and OpenJS incidents similar to XZ backdoor, Moldovan botnet operator charged, US automotive company targeted by FIN7.

The post In Other News: OSS Backdooring Attempts, Botnet Operator Charged, Automotive Firm Attack appeared first on SecurityWeek.

VulnCheck banks $8 million in early stage capital to build 'exploit intelligence' technologies and services.

The post Threat-Intelligence Startup VulnCheck Closes $8M Seed Financing appeared first on SecurityWeek.

Investors make an early-stage $6.5 million bet on BreachRx, a startup promising to shield cybersecurity executives from personal liability.

The post BreachRx Raises $6.5M to Revamp Incident Response Reporting Systems appeared first on SecurityWeek.

Cannes Hospital Centre – Simone Veil cancels medical procedures after shutting down systems in response to a cyberattack.

The post Cannes Hospital Cancels Medical Procedures Following Cyberattack appeared first on SecurityWeek.

MITRE R&D network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability.

The post MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days appeared first on SecurityWeek.

Shadowserver has identified roughly 6,000 internet-accessible Palo Alto Networks firewalls potentially vulnerable to CVE-2024-3400.

The post Thousands of Palo Alto Firewalls Potentially Impacted by Exploited Vulnerability  appeared first on SecurityWeek.

CrushFTP patches a zero-day vulnerability allowing unauthenticated attackers to escape the VFS and retrieve system files.

The post CrushFTP Patches Exploited Zero-Day Vulnerability appeared first on SecurityWeek.

A hack that caused a small Texas town’s water system to overflow in January has been linked to a shadowy Russian hacktivist group, the latest case of a U.S. public utility becoming a target of foreign cyberattacks.

The post Rural Texas Towns Report Cyberattacks That Caused One Water System to Overflow appeared first on SecurityWeek.

Vulnerabilities in Palo Alto Networks Cortex XDR allowed a security researcher to turn it into a malicious offensive tool.

The post Research Shows How Attackers Can Abuse EDR Security Products appeared first on SecurityWeek.

Microsoft PlayReady vulnerabilities that could allow rogue subscribers to illegally download movies from popular streaming services.

The post Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services appeared first on SecurityWeek.

The LockBit ransomware gang leaks data allegedly stolen from government contractor Tyler Technologies.

The post Ransomware Gang Leaks Data Allegedly Stolen From Government Contractor appeared first on SecurityWeek.

Palo Alto Networks firewall vulnerability CVE-2024-3400, exploited as a zero-day, impacts a Siemens industrial product.

The post Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability appeared first on SecurityWeek.

UnitedHealth confirms that personal and health information was stolen in a ransomware attack that could cost the company up to $1.6 billion.

The post UnitedHealth Says Patient Data Exposed in Change Healthcare Cyberattack appeared first on SecurityWeek.

Russia-linked APT28 deploys the GooseEgg post-exploitation tool against numerous US and European organizations.

The post Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations  appeared first on SecurityWeek.

Mandiant's M-Trends 2024 report shows that defenses are improving – and that may be true. But the reality remains that these same statistics demonstrate that if anything, the attackers still retain the upper hand.

The post The Battle Continues: Mandiant Report Shows Improved Detection But Persistent Adversarial Success appeared first on SecurityWeek.

The judge with Spain’s National Court said there is reason to believe that the new information provided by France can “allow the investigations to advance.”

The post Spain Reopens a Probe Into a Pegasus Spyware Case After a French Request to Work Together appeared first on SecurityWeek.

Four Iranians are accused of hacking into critical systems at the Departments of Treasury and State and dozens of private US companies.

The post $10 Million Bounty on Iranian Hackers for Cyberattacks on US Gov, Defense Contractors appeared first on SecurityWeek.

Bain Capital Ventures and angel investors invest $11 million in automated alerts analysis startup Prophet Security.

The post Prophet Security Emerges From Stealth Mode With $11 Million in Funding appeared first on SecurityWeek.

Hive Systems conducts another study on cracking passwords via brute-force attacks, but it’s no longer targeting MD5.

The post New Password Cracking Analysis Targets Bcrypt appeared first on SecurityWeek.

SD-WAN must be scalable, stable, secure, and fully operational to serve as a strong base for seamless modernization and progression to SASE. 

The post SD-WAN: Don’t Build a Dead End, Prepare for Future-Proof Secure Networking appeared first on SecurityWeek.

A threat actor tracked as CoralRaider has been using multiple infostealers to harvest credentials from users worldwide.

The post Threat Actor Uses Multiple Infostealers in Global Campaign appeared first on SecurityWeek.

CISA warns organizations of a two-year-old Windows Print Spooler vulnerability being exploited in the wild.

The post CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation appeared first on SecurityWeek.

Nagomi Security, a company that helps customers prevent threats by leveraging existing security tools, emerged from stealth with $30 million in funding. 

The post Nagomi Security Emerges From Stealth With $30 Million in Funding appeared first on SecurityWeek.

Amplifier Security has raised $3.3 million in funding for a solution that includes human-in-the-loop automation and an AI copilot.

The post Amplifier Security Emerges From Stealth With AI Copilot, Human-in-the-Loop Automation appeared first on SecurityWeek.

Google patches CVE-2024-4058, a critical Chrome vulnerability for which researchers earned a $16,000 reward. 

The post Google Patches Critical Chrome Vulnerability appeared first on SecurityWeek.

Irish startup Tines raises $50 million in new venture capital funding as investors make big bets on automation and orchestration startups.

The post Tines Bags $50 Million Funding for Security Workflow Automation appeared first on SecurityWeek.