The email addresses and other information of hundreds of British, French and EU politicians have been found on the dark web.

The post Information of Hundreds of European Politicians Found on Dark Web appeared first on SecurityWeek.

The BBC has disclosed a data breach impacting over 25,000 current and former employees, but the incident did not involve ransomware.

The post BBC Data Breach Impacts 25,000 Employees appeared first on SecurityWeek.

NIST is receiving support to get the NVD and CVE processing back on track within the next few months.

The post NIST Getting Outside Help for National Vulnerability Database appeared first on SecurityWeek.

The data breach at debt collection agency Financial Business and Consumer Solutions (FBCS) impacts 3.2 million individuals.

The post FBCS Data Breach Impact Grows to 3.2 Million Individuals appeared first on SecurityWeek.

The US announced that the 911 S5 (Cloud Router) botnet, likely the world’s largest, has been dismantled and its administrator arrested.

The post Massive 911 S5 Botnet Dismantled, Chinese Mastermind Arrested appeared first on SecurityWeek.

The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.

The post Check Point VPN Attacks Involve Zero-Day Exploited Since April appeared first on SecurityWeek.

The US government has announced sanctions against three Chinese nationals accused of creating and operating the 911 S5 proxy botnet.

The post US Sanctions Three Chinese Men for Operating 911 S5 Botnet appeared first on SecurityWeek.

Data security and AI governance company Zendata has emerged from stealth mode with $2 million in seed funding.

The post Zendata Emerges From Stealth With Data Security, AI Governance Solutions appeared first on SecurityWeek.

Netflix has paid out more than $1 million for vulnerabilities found in its products since the launch of its bug bounty program in 2016.

The post Netflix Paid Out Over $1 Million via Bug Bounty Program appeared first on SecurityWeek.

Auction house Christie’s has confirmed suffering a data breach following a ransomware attack launched earlier this month.

The post Christie’s Confirms Data Breach After Ransomware Group Claims Attack appeared first on SecurityWeek.

Private equity company Hg has acquired audit, compliance and risk management firm AuditBoard for over $3 billion.

The post Private Equity Firm Hg Acquires AuditBoard for $3 Billion appeared first on SecurityWeek.

Check Point is warning customers that threat actors are targeting insecure VPN instances for initial access to enterprise networks. 

The post Check Point VPNs Targeted to Hack Enterprise Networks appeared first on SecurityWeek.

MITRE has shared information on how China-linked hackers abused VMware for persistence and detection evasion in the recent hack.

The post VMware Abused in Recent MITRE Hack for Persistence, Evasion appeared first on SecurityWeek.

The Association of California School Administrators (ACSA) is informing nearly 55,000 individuals that they have been impacted by a ransomware attack.

The post 55,000 Impacted by Cyberattack on California School Association  appeared first on SecurityWeek.

Intercontinental Exchange, the company that operates NYSE and other exchanges, has agreed to pay a $10 million fine related to a 2021 hack.

The post NYSE Operator Intercontinental Exchange Gets $10M SEC Fine Over 2021 Hack appeared first on SecurityWeek.

Rockwell Automation is concerned about internet-exposed ICS due to heightened geopolitical tensions and adversarial cyber activity globally.

The post Rockwell Automation Urges Customers to Disconnect ICS From Internet appeared first on SecurityWeek.

Claroty shows how Honeywell ControlEdge Virtual UOC vulnerability can be exploited for unauthenticated remote code execution.

The post Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution appeared first on SecurityWeek.

Zoom is announcing post-quantum end-to-end encryption on Meetings, with Phone and Rooms coming soon. 

The post Zoom Adding Post-Quantum End-to-End Encryption to Products appeared first on SecurityWeek.

CISA has added CVE-2023-43208, an unauthenticated remote code execution vulnerability, to its KEV catalog. 

The post CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw appeared first on SecurityWeek.

The EPA has issued an enforcement alert, outlining the steps needed to comply with the Safe Drinking Water Act.

The post EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems appeared first on SecurityWeek.

Linguistic Lumberjack (CVE-2024-4323) is a critical vulnerability in the Fluent Bit logging utility that can allow DoS, information disclosure and possibly RCE.

The post Vulnerability Found in Fluent Bit Utility Used by Major Cloud, Tech Companies appeared first on SecurityWeek.

Roundup of the cybersecurity-related merger and acquisition (M&A) deals announced in the first half of May 2024.

The post Cybersecurity M&A Roundup for First Half of May 2024 appeared first on SecurityWeek.

The American Radio Relay League (ARRL) has been targeted in a cyberattack that resulted in disruption and possibly a data breach.

The post American Radio Relay League Hit by Cyberattack appeared first on SecurityWeek.

A critical vulnerability tracked as CVE-2024-34359 and dubbed Llama Drama can allow hackers to target AI product developers.

The post Critical Flaw in AI Python Package Can Lead to System and Data Compromise appeared first on SecurityWeek.

The US government has announced charges, seizures, arrests and rewards as part of an effort to disrupt a scheme that generates revenue for North Korea.

The post Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms appeared first on SecurityWeek.

Nissan North America determined recently that a ransomware attack launched last year resulted in employee personal information compromise.

The post Nissan Data Breach Impacts 53,000 Employees appeared first on SecurityWeek.

The hacking forum BreachForums is displaying a notice claiming that the website is under the control of the FBI.

The post BreachForums Shut Down in Apparent Law Enforcement Operation appeared first on SecurityWeek.

Intel has published 41 new May 2024 Patch Tuesday advisories covering a total of more than 90 vulnerabilities. 

The post Intel Publishes 41 Security Advisories for Over 90 Vulnerabilities  appeared first on SecurityWeek.

The Spanish bank Santander said customers in Chile, Spain and Uruguay are affected by a data breach at a third-party provider.

The post Santander Data Breach Impacts Customers, Employees appeared first on SecurityWeek.

Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in their products. 

The post ICS Patch Tuesday: Advisories Published by Siemens, Rockwell, Mitsubishi Electric appeared first on SecurityWeek.

VMware has patched three vulnerabilities exploited earlier this year at the Pwn2Own hacking competition.

The post VMware Patches Vulnerabilities Exploited at Pwn2Own 2024 appeared first on SecurityWeek.

Google has patched CVE-2024-4761, the second exploited vulnerability addressed by the company within one week.

The post Google Patches Second Chrome Zero-Day in One Week appeared first on SecurityWeek.

MITRE announced the public availability of the EMB3D threat model for embedded devices used in critical infrastructure.

The post MITRE EMB3D Threat Model Officially Released appeared first on SecurityWeek.

Zscaler has completed its investigation into the recent hacking claims and found that only an isolated test environment was compromised.

The post Zscaler Confirms Only Isolated Test Server Was Hacked appeared first on SecurityWeek.

Europol is investigating a data breach, but says no core systems are impacted and no operational data has been compromised.

The post Europol Investigating Breach After Hacker Offers to Sell Classified Data appeared first on SecurityWeek.

The Chinese hacking contest Matrix Cup is offering big rewards for exploits targeting OSs, smartphones, enterprise software, browsers, and security products.

The post $2.5 Million Offered at Upcoming ‘Matrix Cup’ Chinese Hacking Contest  appeared first on SecurityWeek.

A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024.

The post Exploited Chrome Zero-Day Patched by Google appeared first on SecurityWeek.

The Ohio Lottery cyberattack conducted by the DragonForce ransomware group has impacted more than 500,000 individuals.

The post 500,000 Impacted by Ohio Lottery Ransomware Attack appeared first on SecurityWeek.

The LockBit cybercrime group has taken credit for the recent ransomware attack that disrupted City of Wichita systems.

The post LockBit Takes Credit for City of Wichita Ransomware Attack appeared first on SecurityWeek.

CISA’s Vulnrichment project is adding important information to CVE records to help improve vulnerability management processes.

The post CISA Announces CVE Enrichment Project ‘Vulnrichment’ appeared first on SecurityWeek.

F5 has patched two potentially serious vulnerabilities in BIG-IP Next that could allow an attacker to take full control of a device.

The post F5 Patches Dangerous Vulnerabilities in BIG-IP Next Central Manager appeared first on SecurityWeek.

Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco.

The post RSA Conference 2024 – Announcements Summary (Day 3) appeared first on SecurityWeek.

Zscaler says its customer, production and corporate environments are not impacted after a notorious hacker offers to sell access.

The post Zscaler Investigates Hacking Claims After Data Offered for Sale appeared first on SecurityWeek.

Healthcare cybersecurity company Blackwell Security has raised $13 million and appointed Geyer Jones as its first CEO.

The post Healthcare Cybersecurity Firm Blackwell Raises $13 Million appeared first on SecurityWeek.

Niobium has raised $5.5 million in seed funding for a fully homomorphic encryption (FHE) hardware accelerator designed for zero trust computing.

The post Niobium Raises $5.5M for Zero Trust Computing Hardware Acceleration appeared first on SecurityWeek.

Cloud security giant Wiz has raised $1 billion, which brings the total funding to $1.9 billion, at a valuation of $12 billion.

The post Wiz Raises $1 Billion at $12 Billion Valuation appeared first on SecurityWeek.

MITRE has shared more details on the recent hack, including the new malware involved in the attack and a timeline of the attacker’s activities.

The post MITRE Hack: China-Linked Group Breached Systems in December 2023 appeared first on SecurityWeek.

Synopsys is selling its Software Integrity Group to private equity firms Clearlake Capital and Francisco Partners in a $2.1 billion deal. 

The post Synopsys Sells Software Integrity Business in $2.1 Billion Deal appeared first on SecurityWeek.

CyberNut has emerged from stealth mode with a K-12-focused security awareness training solution and $800k in pre-seed funding.

The post CyberNut Emerges From Stealth With K-12 Security Awareness Training Solution appeared first on SecurityWeek.