Noteworthy stories that might have slipped under the radar: Apple WPS can be abused for surveillance, Canadian government wants backdoors, NIST launches AI program.

The post In Other News: Apple WPS Surveillance, Canadian Gov Wants Backdoors, NIST AI Program appeared first on SecurityWeek.

The email addresses and other information of hundreds of British, French and EU politicians have been found on the dark web.

The post Information of Hundreds of European Politicians Found on Dark Web appeared first on SecurityWeek.

Over 600,000 SOHO routers belonging to a single ISP and infected with the Chalubo trojan were rendered inoperable.

The post Mysterious Threat Actor Used Chalubo Malware to Brick 600,000 Routers appeared first on SecurityWeek.

CISA instructs federal agencies to mitigate CVE-2024-1086, a Linux kernel flaw leading to privilege escalation.

The post CISA Warns of Exploited Linux Kernel Vulnerability appeared first on SecurityWeek.

Altman spent part of his virtual appearance fending off thorny questions about governance, an AI voice controversy and criticism from ousted board members.

The post OpenAI’s Altman Sidesteps Questions About Governance, Johansson at UN AI Summit appeared first on SecurityWeek.

The ShinyHunters hacking group has claimed the theft of 560 million Ticketmaster users’ data on a fresh BreachForums portal.

The post Hackers Boast Ticketmaster Breach on Relaunched BreachForums appeared first on SecurityWeek.

The BBC has disclosed a data breach impacting over 25,000 current and former employees, but the incident did not involve ransomware.

The post BBC Data Breach Impacts 25,000 Employees appeared first on SecurityWeek.

Cloudlfare acquires Boston seed-stage startup BastionZero to bolster its Zero Trust Network Access technology portfolio.

The post Cloudflare Expands Zero Trust Capabilities with Acquisition of BastionZero appeared first on SecurityWeek.

SecurityWeek editor-at-large Ryan Naraine examines the broad tension between tech innovation and privacy rights at a time when ChatGPT-like bots and generative-AI apps are starting to dominate the landscape. 

The post Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach? appeared first on SecurityWeek.

Malicious campaign exploits high-severity XSS flaws in three WordPress plugins to backdoor websites.

The post Critical WordPress Plugin Flaws Exploited to Inject Malicious Scripts and Backdoors appeared first on SecurityWeek.

NIST is receiving support to get the NVD and CVE processing back on track within the next few months.

The post NIST Getting Outside Help for National Vulnerability Database appeared first on SecurityWeek.

The TrickBot botnet and other malware droppers have been targeted by international law enforcement in Operation Endgame.

The post TrickBot and Other Malware Droppers Disrupted by Law Enforcement appeared first on SecurityWeek.

The data breach at debt collection agency Financial Business and Consumer Solutions (FBCS) impacts 3.2 million individuals.

The post FBCS Data Breach Impact Grows to 3.2 Million Individuals appeared first on SecurityWeek.

Okta raises the alarm on credential stuffing attacks targeting endpoints used for cross-origin authentication.

The post Okta Warns of Credential Stuffing Attacks Targeting Cross-Origin Authentication appeared first on SecurityWeek.

Assembling a diverse team, outlining clear objectives, and meticulously assessing your network landscape can enable organizations to successfully navigate SASE migration without hiccups and pitfalls.

The post 8 Degrees of Secure Access Service Edge       appeared first on SecurityWeek.

The US announced that the 911 S5 (Cloud Router) botnet, likely the world’s largest, has been dismantled and its administrator arrested.

The post Massive 911 S5 Botnet Dismantled, Chinese Mastermind Arrested appeared first on SecurityWeek.

The Seattle Public Library is scrambling to bring systems online after shutting them down to contain a ransomware attack.

The post Ransomware Attack Disrupts Seattle Public Library Services appeared first on SecurityWeek.

The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.

The post Check Point VPN Attacks Involve Zero-Day Exploited Since April appeared first on SecurityWeek.

San Francisco data privacy startup Transcend secures 40 million in a Series B funding round that brings the total raised to $90 million.

The post Transcend Raises $40 Million for Data Privacy Platform appeared first on SecurityWeek.

Vulnerabilities in the real-time IoT operating system Eclipse ThreadX before version 6.4 could lead to denial-of-service and code execution.

The post Vulnerabilities in Eclipse ThreadX Could Lead to Code Execution appeared first on SecurityWeek.

The US government has announced sanctions against three Chinese nationals accused of creating and operating the 911 S5 proxy botnet.

The post US Sanctions Three Chinese Men for Operating 911 S5 Botnet appeared first on SecurityWeek.

Data security and AI governance company Zendata has emerged from stealth mode with $2 million in seed funding.

The post Zendata Emerges From Stealth With Data Security, AI Governance Solutions appeared first on SecurityWeek.

Microsoft dives into the tactics, techniques, and procedures of North Korean threat actor Moonstone Sleet.

The post New North Korean Threat Actor Engaging in Espionage, Revenue Generation Attacks appeared first on SecurityWeek.

Disruptive digital attacks – many traced to Russia-backed groups – have doubled in the European Union in 2024 and are also targeting election-related services, according to the EU’s top cybersecurity official.

The post Europe’s Cybersecurity Chief Says Disruptive Attacks Have Doubled in 2024, Sees Russia Behind Many appeared first on SecurityWeek.

The two primary components to the solution are to encrypt company data at all times, and to decrypt only when the file is required for use.

The post New Endpoint Protection Platform by Cigent Blocks Ransomware at the Data Level appeared first on SecurityWeek.

First American will notify 44,000 individuals that their personal information may have been stolen in a December 2023 ransomware attack.

The post Personal Information of 44,000 Compromised in First American Cyberattack appeared first on SecurityWeek.

Netflix has paid out more than $1 million for vulnerabilities found in its products since the launch of its bug bounty program in 2016.

The post Netflix Paid Out Over $1 Million via Bug Bounty Program appeared first on SecurityWeek.

While reintegration of formerly incarcerated people into the workforce is important, the government should be cautious about what positions those with a criminal history are put into.

The post Congresswomen Advocate for Cybersecurity Jobs for Formerly Incarcerated appeared first on SecurityWeek.

OpenAI is setting up a new safety and security committee and has begun training a new artificial intelligence model to supplant the GPT-4 system that underpins its ChatGPT chatbot.

The post OpenAI Forms Safety Committee as It Starts Training Latest Artificial Intelligence Model appeared first on SecurityWeek.

ABN Amro discloses data breach after third-party services provider AddComm suffers a ransomware attack.

The post ABN Amro Client Data Possibly Stolen in AddComm Ransomware Attack appeared first on SecurityWeek.

While Red Teams can expose and root out organization specific weaknesses, there is another growing class of vulnerability at an industry level.

The post Social Distortion: The Threat of Fear, Uncertainty and Deception in Creating Security Risk appeared first on SecurityWeek.

Auction house Christie’s has confirmed suffering a data breach following a ransomware attack launched earlier this month.

The post Christie’s Confirms Data Breach After Ransomware Group Claims Attack appeared first on SecurityWeek.

Private equity company Hg has acquired audit, compliance and risk management firm AuditBoard for over $3 billion.

The post Private Equity Firm Hg Acquires AuditBoard for $3 Billion appeared first on SecurityWeek.

A threat actor is asking $50,000 for data allegedly stolen from Australian digital prescription services provider MediSecure.

The post Data Stolen From MediSecure for Sale on Dark Web appeared first on SecurityWeek.

Pharmacy prescription services provider Sav-Rx says the personal information of 2.8 million was stolen in a cyberattack.

The post 2.8 Million Impacted by Data Breach at Prescription Services Firm Sav-Rx appeared first on SecurityWeek.

Check Point is warning customers that threat actors are targeting insecure VPN instances for initial access to enterprise networks. 

The post Check Point VPNs Targeted to Hack Enterprise Networks appeared first on SecurityWeek.

Only one of seven bills aimed at preventing AI’s penchant to discriminate when making consequential decisions — including who gets hired, money for a home or medical care — has passed.

The post Attempts to Regulate AI’s Hidden Hand in Americans’ Lives Flounder in US Statehouses appeared first on SecurityWeek.

Backdoored JAVS courtroom recording and management software installer puts thousands at risk of complete takeover.

The post JAVS Courtroom Audio-Visual Software Installer Serves Backdoor appeared first on SecurityWeek.

Averson secures seed funding to build technology that uses AI to identify cloud security weaknesses and counter cyberattacks.

The post Averlon Emerges From Stealth Mode With $8 Million in Funding appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: Chinese repair ships might be spying on undersea communications, spyware found at hotel check-ins, UK not ready for China threat.

The post In Other News: China’s Undersea Spying, Hotel Spyware, Iran’s Disruptive Attacks appeared first on SecurityWeek.

Exploited in the wild, Chrome vulnerability CVE-2024-5274 is a high-severity flaw described as a type confusion in the V8 JavaScript and WebAssembly engine.

The post Google Patches Fourth Chrome Zero-Day in Two Weeks appeared first on SecurityWeek.

U.S. intelligence agencies are scrambling to embrace the AI revolution, believing they’ll be smothered by exponential data growth as sensor-generated surveillance tech further blankets the planet.

The post US Intelligence Agencies’ Embrace of Generative AI Is at Once Wary and Urgent appeared first on SecurityWeek.

MITRE has shared information on how China-linked hackers abused VMware for persistence and detection evasion in the recent hack.

The post VMware Abused in Recent MITRE Hack for Persistence, Evasion appeared first on SecurityWeek.

Bolster has raised $14 million in Series B funding for technology integrations for its AI-powered phishing protection platform.

The post Bolster Raises $14 Million for AI-Powered Phishing Protection appeared first on SecurityWeek.

The Association of California School Administrators (ACSA) is informing nearly 55,000 individuals that they have been impacted by a ransomware attack.

The post 55,000 Impacted by Cyberattack on California School Association  appeared first on SecurityWeek.

Under the new U.S. Cyber Trust Mark Initiative, manufacturers can affix the label on their products if they meet federal cybersecurity standards.

The post Cybersecurity Labeling for Smart Devices Aims to Help People Choose Items Less Likely to be Hacked appeared first on SecurityWeek.

Attackers are getting more sophisticated, better armed, and faster. Nothing in Rapid7's 2024 Attack Intelligence Report suggests that this will change.

The post Zero-Day Attacks and Supply Chain Compromises Surge, MFA Remains Underutilized: Rapid7 Report appeared first on SecurityWeek.

It will be interesting to see how AI continues to evolve and how it is used by defenders as they attempt to leapfrog attackers and protect the organization against new forms of AI attacks.

The post Why We Need to Get a Handle on AI appeared first on SecurityWeek.

Unfading Sea Haze has been targeting military and government entities in South China Sea countries since 2018.

The post Newly Detected Chinese Group Targeting Military, Government Entities appeared first on SecurityWeek.