US insurance company Globe Life is investigating a data breach involving unauthorized access to consumer and policyholder information.
The post Insurance Company Globe Life Investigating Data Breach appeared first on SecurityWeek.
A British man has been arrested in Spain for allegedly being the ringleader of the notorious Scattered Spider cybercrime group.
The post UK Man Suspected of Being ‘Scattered Spider’ Leader Arrested appeared first on SecurityWeek.
Rockwell Automation has patched three high-severity vulnerabilities in its FactoryTalk View SE HMI software.
The post Rockwell Automation Patches High-Severity Vulnerabilities in FactoryTalk View SE appeared first on SecurityWeek.
Microsoft is not rolling out Recall with Copilot+ PCs as it’s seeking additional feedback and working on improving security.
The post Microsoft Delaying Recall Feature to Improve Security appeared first on SecurityWeek.
Pyte has raised $5 million for its secure computation platform, bringing the total investment in the company to $12 million.
The post Pyte Raises $5 Million for Secure Data Collaboration Solutions appeared first on SecurityWeek.
AWS announced passkey MFA for IAM and root users, IAM Access Analyzer updates, and Amazon GuardDuty Malware Protection for S3.
The post AWS Announces Authentication and Malware Protection Enhancements appeared first on SecurityWeek.
Analysis and insights on the prevalence and impact of password exposure vulnerabilities in ICS and other OT products.
The post Prevalence and Impact of Password Exposure Vulnerabilities in ICS/OT appeared first on SecurityWeek.
The Black Basta ransomware gang may have exploited the Windows privilege escalation flaw CVE-2024-26169 before it was patched.
The post Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day appeared first on SecurityWeek.
Data security company Cyberhaven has raised $88 million in a Series C funding round that brings the total to $136 million.
The post Data Security Firm Cyberhaven Raises $88 Million at $488 Million Valuation appeared first on SecurityWeek.
The code hosting platform GitHub has paid out more than $4 million since the launch of its bug bounty program 10 years ago.
The post GitHub Paid Out Over $4 Million via Bug Bounty Program appeared first on SecurityWeek.
Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in their industrial and OT products.
The post ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA appeared first on SecurityWeek.
Apple has released a visionOS update that patches CVE-2024-27812, which may be the first flaw specific to the VR headset.
The post Apple Patches Vision Pro Vulnerability Used in Possibly ‘First Ever Spatial Computing Hack’ appeared first on SecurityWeek.
BlackBerry says the Cylance data offered for sale for $750,000 is old and its own systems have not been compromised.
The post BlackBerry Cylance Data Offered for Sale on Dark Web appeared first on SecurityWeek.
OT zero trust user access platform provider Xona has raised $18 million, which brings its total investment to $32 million.
The post Xona Raises $18 Million for OT Remote Access Platform appeared first on SecurityWeek.
The New York Times has issued a statement after someone leaked source code allegedly belonging to the news giant.
The post New York Times Responds to Source Code Leak appeared first on SecurityWeek.
Cisco Talos researchers have found over a dozen vulnerabilities in AutomationDirect PLCs, including flaws that could be valuable to attackers.
The post Cisco Finds 15 Vulnerabilities in AutomationDirect PLCs appeared first on SecurityWeek.
Auction house Christie's says the data breach caused by the recent ransomware attack impacts the information of 45,000 individuals.
The post Christie’s Says Ransomware Attack Impacts 45,000 People appeared first on SecurityWeek.
Mozilla has announced a 0Day Investigative Network (0Din) bug bounty program for LLMs and other deep learning tech.
The post Mozilla Launches 0Din Gen-AI Bug Bounty Program appeared first on SecurityWeek.
To comply with new UK government regulations, Apple has specified that iPhones will get at least 5 years of security updates.
The post Apple Says iPhones Will Get Security Updates for at Least 5 Years appeared first on SecurityWeek.
The US government is trying to recover more than $5.3 million stolen by cybercriminals through a BEC scheme from a workers union.
The post US Authorities Attempting to Recover $5.3 Million Stolen in BEC Scam appeared first on SecurityWeek.
It took code security firm Kiuwan nearly two years to patch several serious vulnerabilities found in its SAST products.
The post Vulnerabilities Patched in Kiuwan Code Security Products After Long Disclosure Process appeared first on SecurityWeek.
The FBI has obtained more than 7,000 LockBit ransomware decryption keys and is urging victims to get in touch with its IC3.
The post FBI Says It Has 7,000 LockBit Ransomware Decryption Keys appeared first on SecurityWeek.
Cybersecurity researchers are demonstrating how malware could steal data collected by the new Windows Recall feature.
The post Researchers Show How Malware Could Steal Windows Recall Data appeared first on SecurityWeek.
There are 1.2 million cybersecurity workers in the US, but 225,000 more are needed to close the talent gap, according to new data.
The post 225,000 More Cybersecurity Workers Needed in US: CyberSeek appeared first on SecurityWeek.
Cisco has released a security advisory after researchers discovered that the German government’s Webex meetings were exposed.
The post Cisco Patches Webex Bugs Following Exposure of German Government Meetings appeared first on SecurityWeek.
CISA has added an old Oracle WebLogic flaw tracked as CVE-2017-3506 to its known exploited vulnerabilities catalog.
The post CISA Warns of Attacks Exploiting Old Oracle WebLogic Vulnerability appeared first on SecurityWeek.
Roundup of the more than two dozen cybersecurity-related merger and acquisition (M&A) deals announced in May 2024.
The post Cybersecurity M&A Roundup: 28 Deals Announced in May 2024 appeared first on SecurityWeek.
Cox recently patched a series of vulnerabilities that could have allowed hackers to remotely take control of millions of modems.
The post Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking appeared first on SecurityWeek.
AI tool development platform Hugging Face has detected a Spaces hack that resulted in the exposure of secrets.
The post Secrets Exposed in Hugging Face Hack appeared first on SecurityWeek.
The email addresses and other information of hundreds of British, French and EU politicians have been found on the dark web.
The post Information of Hundreds of European Politicians Found on Dark Web appeared first on SecurityWeek.
The BBC has disclosed a data breach impacting over 25,000 current and former employees, but the incident did not involve ransomware.
The post BBC Data Breach Impacts 25,000 Employees appeared first on SecurityWeek.
NIST is receiving support to get the NVD and CVE processing back on track within the next few months.
The post NIST Getting Outside Help for National Vulnerability Database appeared first on SecurityWeek.
The data breach at debt collection agency Financial Business and Consumer Solutions (FBCS) impacts 3.2 million individuals.
The post FBCS Data Breach Impact Grows to 3.2 Million Individuals appeared first on SecurityWeek.
The US announced that the 911 S5 (Cloud Router) botnet, likely the world’s largest, has been dismantled and its administrator arrested.
The post Massive 911 S5 Botnet Dismantled, Chinese Mastermind Arrested appeared first on SecurityWeek.
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.
The post Check Point VPN Attacks Involve Zero-Day Exploited Since April appeared first on SecurityWeek.
The US government has announced sanctions against three Chinese nationals accused of creating and operating the 911 S5 proxy botnet.
The post US Sanctions Three Chinese Men for Operating 911 S5 Botnet appeared first on SecurityWeek.
Data security and AI governance company Zendata has emerged from stealth mode with $2 million in seed funding.
The post Zendata Emerges From Stealth With Data Security, AI Governance Solutions appeared first on SecurityWeek.
Netflix has paid out more than $1 million for vulnerabilities found in its products since the launch of its bug bounty program in 2016.
The post Netflix Paid Out Over $1 Million via Bug Bounty Program appeared first on SecurityWeek.
Auction house Christie’s has confirmed suffering a data breach following a ransomware attack launched earlier this month.
The post Christie’s Confirms Data Breach After Ransomware Group Claims Attack appeared first on SecurityWeek.
Private equity company Hg has acquired audit, compliance and risk management firm AuditBoard for over $3 billion.
The post Private Equity Firm Hg Acquires AuditBoard for $3 Billion appeared first on SecurityWeek.
Check Point is warning customers that threat actors are targeting insecure VPN instances for initial access to enterprise networks.
The post Check Point VPNs Targeted to Hack Enterprise Networks appeared first on SecurityWeek.
MITRE has shared information on how China-linked hackers abused VMware for persistence and detection evasion in the recent hack.
The post VMware Abused in Recent MITRE Hack for Persistence, Evasion appeared first on SecurityWeek.
The Association of California School Administrators (ACSA) is informing nearly 55,000 individuals that they have been impacted by a ransomware attack.
The post 55,000 Impacted by Cyberattack on California School Association appeared first on SecurityWeek.
Intercontinental Exchange, the company that operates NYSE and other exchanges, has agreed to pay a $10 million fine related to a 2021 hack.
The post NYSE Operator Intercontinental Exchange Gets $10M SEC Fine Over 2021 Hack appeared first on SecurityWeek.
Rockwell Automation is concerned about internet-exposed ICS due to heightened geopolitical tensions and adversarial cyber activity globally.
The post Rockwell Automation Urges Customers to Disconnect ICS From Internet appeared first on SecurityWeek.
Claroty shows how Honeywell ControlEdge Virtual UOC vulnerability can be exploited for unauthenticated remote code execution.
The post Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution appeared first on SecurityWeek.
Zoom is announcing post-quantum end-to-end encryption on Meetings, with Phone and Rooms coming soon.
The post Zoom Adding Post-Quantum End-to-End Encryption to Products appeared first on SecurityWeek.
CISA has added CVE-2023-43208, an unauthenticated remote code execution vulnerability, to its KEV catalog.
The post CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw appeared first on SecurityWeek.
The EPA has issued an enforcement alert, outlining the steps needed to comply with the Safe Drinking Water Act.
The post EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems appeared first on SecurityWeek.
Login