The US cybersecurity agency CISA has conducted a tabletop exercise with the private sector focused on AI cyber incident response.

The post CISA Conducts First AI Cyber Incident Response Exercise appeared first on SecurityWeek.

Keytronic confirms that personal information was compromised after a ransomware group leaked allegedly stolen data.

The post Keytronic Says Personal Information Stolen in Ransomware Attack appeared first on SecurityWeek.

The LA County’s Department of Public Health says the personal information of 200,000 was compromised in a data breach.

The post 200,000 Impacted by Data Breach at Los Angeles County Public Health Agency appeared first on SecurityWeek.

Nigerian national Ebuka Raphael Umeti was convicted in the US for operating a business email compromise (BEC) scheme.

The post Nigerian Faces Prison in US After BEC Fraud Conviction appeared first on SecurityWeek.

Security researchers at Cisco Talos and Volexity flag two Pakistani espionage campaigns targeting Indian government entities.

The post Pakistani Threat Actors Caught Targeting Indian Gov Entities appeared first on SecurityWeek.

Ascension says patient information was stolen in an early-May ransomware attack that involved an employee downloading malware.

The post Ascension Says Personal, Health Information Stolen in Ransomware Attack appeared first on SecurityWeek.

CISA urges federal agencies to apply mitigations for an exploited Progress Telerik vulnerability as soon as possible.

The post CISA Warns of Progress Telerik Vulnerability Exploitation appeared first on SecurityWeek.

YesWeHack has raised more than $52 million to date to build and market a crowdsourced vulnerability reporting platform.

The post French Bug Bounty Platform YesWeHack Raises $28 Million appeared first on SecurityWeek.

Protect AI warns of a dozen critical vulnerabilities in open source AI/ML tools reported via its bug bounty program.

The post Easily Exploitable Critical Vulnerabilities Found in Open Source AI/ML Tools appeared first on SecurityWeek.

Life360 says hackers attempted to extort it after stealing personal information from a Tile customer support platform.

The post Life360 Says Personal Information Stolen From Tile Customer Support Platform appeared first on SecurityWeek.

The City of Cleveland says emergency services, utilities, and airport are unaffected by a recent cyberattack.

The post City of Cleveland Scrambling to Restore Systems Following Cyberattack appeared first on SecurityWeek.

Microsoft’s June 2024 Patch Tuesday updates resolve a zero-click Outlook vulnerability leading to remote code execution.

The post Microsoft Patches Zero-Click Outlook Vulnerability That Could Soon Be Exploited appeared first on SecurityWeek.

Fortinet has patched multiple vulnerabilities in FortiOS, including a high-severity code execution security flaw.

The post Fortinet Patches Code Execution Vulnerability in FortiOS appeared first on SecurityWeek.

Google and Mozilla have released patches for 21 and 15 vulnerabilities in Chrome and Firefox, respectively.

The post Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities appeared first on SecurityWeek.

The TellYouThePass ransomware gang started exploiting a recent code execution flaw in PHP days after public disclosure.

The post Ransomware Group Exploits PHP Vulnerability Days After Disclosure appeared first on SecurityWeek.

UK authorities have arrested two individuals for allegedly using a homemade mobile antenna to send mass text messages.

The post Two Arrested in UK for Smishing Campaign Powered by Homemade SMS Blaster  appeared first on SecurityWeek.

Redfox Security warns of multiple vulnerabilities in Netgear WNR614 routers discontinued three years ago.

The post Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers appeared first on SecurityWeek.

SAP has released 10 new security notes on June 2024 Security Patch Day, including two addressing high-severity vulnerabilities.

The post SAP Patches High-Severity Vulnerabilities in Financial Consolidation, NetWeaver appeared first on SecurityWeek.

Arm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks.

The post Arm Warns of Exploited Kernel Driver Vulnerability appeared first on SecurityWeek.

Mandiant says a financially motivated threat actor has compromised hundreds of Snowflake instances using customer credentials stolen via infostealer malware that infected non-Snowflake owned systems.

The post Snowflake Attacks: Mandiant Links Data Breaches to Infostealer Infections appeared first on SecurityWeek.

A critical vulnerability in the PyTorch distributed RPC framework could be exploited for remote code execution.

The post Critical PyTorch Vulnerability Can Lead to Sensitive AI Data Theft appeared first on SecurityWeek.

PHP has released patches for CVE-2024-4577, a critical vulnerability that could lead to arbitrary code execution on remote servers.

The post PHP Patches Critical Remote Code Execution Vulnerability appeared first on SecurityWeek.

Nvidia patches multiple high-severity vulnerabilities in GPU display drivers and virtual GPU software.

The post Nvidia Patches High-Severity GPU Driver Vulnerabilities appeared first on SecurityWeek.

The FCC proposes that broadband providers plan for BGP security and provide quarterly reports on implemented risk mitigations.

The post FCC Proposes BGP Security Reporting for Broadband Providers appeared first on SecurityWeek.

AI-powered MDR startup AirMDR has raised $5 million in seed funding from Foundation Capital and Storm Ventures.

The post AirMDR Raises $5 Million for AI-Powered Managed Detection and Response appeared first on SecurityWeek.

SolarWinds has released patches for high-severity vulnerabilities in Serv-U and the SolarWinds Platform.

The post SolarWinds Patches High-Severity Vulnerability Reported by NATO Pentester appeared first on SecurityWeek.

Frontier Communications is notifying over 750,000 individuals that their personal information was stolen in a recent data breach.

The post 750k Impacted by Frontier Communications Data Breach appeared first on SecurityWeek.

Akamai warns that a Chinese threat actor is exploiting years-old remote code execution vulnerabilities in ThinkPHP in new attacks.

The post Chinese Hackers Exploit Old ThinkPHP Vulnerabilities in New Attacks appeared first on SecurityWeek.

Google and Microsoft warn of elevated risks of cyber threats facing the 2024 Paris Olympics, especially from Russian threat actors.

The post Google, Microsoft: Russian Threat Actors Pose High Risk to 2024 Paris Olympics appeared first on SecurityWeek.

GreyNoise has observed a rapid increase in the number of exploitation attempts targeting a recent Check Point VPN zero-day.

The post Exploitation of Recent Check Point VPN Zero-Day Soars appeared first on SecurityWeek.

Multiple Chinese state-sponsored groups have targeted a Southeast Asian government in a years-long cyberespionage campaign.

The post Multiple Chinese APTs Targeted Southeast Asian Government for Two Years appeared first on SecurityWeek.

Passwordless authentication provider Hypr has received a $30 million investment from Silver Lake Waterman.

The post Hypr Raises $30 Million for Passwordless Authentication appeared first on SecurityWeek.

Critical vulnerabilities in discontinued Zyxel NAS products allow unauthenticated attackers to execute arbitrary code and OS commands.

The post ‘NsaRescueAngel’ Backdoor Account Again Discovered in Zyxel Products appeared first on SecurityWeek.

The BianLian ransomware gang has leaked data allegedly stolen from Australian mining company Northern Minerals.

The post Ransomware Gang Leaks Data From Australian Mining Company appeared first on SecurityWeek.

SonicWall has shared technical details on a recently addressed high-severity remote code execution flaw in Confluence.

The post Details of Atlassian Confluence RCE Vulnerability Disclosed appeared first on SecurityWeek.

A critical vulnerability in the Progress Telerik Report Server could allow unauthenticated attackers to access restricted functionality.

The post Progress Patches Critical Vulnerability in Telerik Report Server appeared first on SecurityWeek.

The RansomHub ransomware group claims to have stolen the information of over 2 million Frontier Communications customers.

The post Ransomware Group Claims Cyberattack on Frontier Communications appeared first on SecurityWeek.

Android’s June 2024 security update resolves 37 vulnerabilities, including high-severity flaws in Framework and System.

The post 37 Vulnerabilities Patched in Android appeared first on SecurityWeek.

Law enforcement reveals the identities of eight cybercriminals linked to recently disrupted malware loaders.

The post Identities of Cybercriminals Linked to Malware Loaders Revealed appeared first on SecurityWeek.

PoC code targeting a recent Check Point VPN zero-day has been released as Censys identifies 14,000 internet-accessible appliances.

The post PoC Published for Exploited Check Point VPN Vulnerability appeared first on SecurityWeek.

Ticketmaster and other organizations have been affected by a data breach at cloud AI data platform Snowflake.

The post Snowflake Data Breach Impacts Ticketmaster, Other Organizations appeared first on SecurityWeek.

Over 600,000 SOHO routers belonging to a single ISP and infected with the Chalubo trojan were rendered inoperable.

The post Mysterious Threat Actor Used Chalubo Malware to Brick 600,000 Routers appeared first on SecurityWeek.

CISA instructs federal agencies to mitigate CVE-2024-1086, a Linux kernel flaw leading to privilege escalation.

The post CISA Warns of Exploited Linux Kernel Vulnerability appeared first on SecurityWeek.

The ShinyHunters hacking group has claimed the theft of 560 million Ticketmaster users’ data on a fresh BreachForums portal.

The post Hackers Boast Ticketmaster Breach on Relaunched BreachForums appeared first on SecurityWeek.

Malicious campaign exploits high-severity XSS flaws in three WordPress plugins to backdoor websites.

The post Critical WordPress Plugin Flaws Exploited to Inject Malicious Scripts and Backdoors appeared first on SecurityWeek.

The TrickBot botnet and other malware droppers have been targeted by international law enforcement in Operation Endgame.

The post TrickBot and Other Malware Droppers Disrupted by Law Enforcement appeared first on SecurityWeek.

Okta raises the alarm on credential stuffing attacks targeting endpoints used for cross-origin authentication.

The post Okta Warns of Credential Stuffing Attacks Targeting Cross-Origin Authentication appeared first on SecurityWeek.

The Seattle Public Library is scrambling to bring systems online after shutting them down to contain a ransomware attack.

The post Ransomware Attack Disrupts Seattle Public Library Services appeared first on SecurityWeek.

San Francisco data privacy startup Transcend secures 40 million in a Series B funding round that brings the total raised to $90 million.

The post Transcend Raises $40 Million for Data Privacy Platform appeared first on SecurityWeek.