A critical vulnerability tracked as CVE-2024-34359 and dubbed Llama Drama can allow hackers to target AI product developers.

The post Critical Flaw in AI Python Package Can Lead to System and Data Compromise appeared first on SecurityWeek.

The US government has announced charges, seizures, arrests and rewards as part of an effort to disrupt a scheme that generates revenue for North Korea.

The post Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms appeared first on SecurityWeek.

Nissan North America determined recently that a ransomware attack launched last year resulted in employee personal information compromise.

The post Nissan Data Breach Impacts 53,000 Employees appeared first on SecurityWeek.

The hacking forum BreachForums is displaying a notice claiming that the website is under the control of the FBI.

The post BreachForums Shut Down in Apparent Law Enforcement Operation appeared first on SecurityWeek.

Intel has published 41 new May 2024 Patch Tuesday advisories covering a total of more than 90 vulnerabilities. 

The post Intel Publishes 41 Security Advisories for Over 90 Vulnerabilities  appeared first on SecurityWeek.

The Spanish bank Santander said customers in Chile, Spain and Uruguay are affected by a data breach at a third-party provider.

The post Santander Data Breach Impacts Customers, Employees appeared first on SecurityWeek.

Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in their products. 

The post ICS Patch Tuesday: Advisories Published by Siemens, Rockwell, Mitsubishi Electric appeared first on SecurityWeek.

VMware has patched three vulnerabilities exploited earlier this year at the Pwn2Own hacking competition.

The post VMware Patches Vulnerabilities Exploited at Pwn2Own 2024 appeared first on SecurityWeek.

Google has patched CVE-2024-4761, the second exploited vulnerability addressed by the company within one week.

The post Google Patches Second Chrome Zero-Day in One Week appeared first on SecurityWeek.

MITRE announced the public availability of the EMB3D threat model for embedded devices used in critical infrastructure.

The post MITRE EMB3D Threat Model Officially Released appeared first on SecurityWeek.

Zscaler has completed its investigation into the recent hacking claims and found that only an isolated test environment was compromised.

The post Zscaler Confirms Only Isolated Test Server Was Hacked appeared first on SecurityWeek.

Europol is investigating a data breach, but says no core systems are impacted and no operational data has been compromised.

The post Europol Investigating Breach After Hacker Offers to Sell Classified Data appeared first on SecurityWeek.

The Chinese hacking contest Matrix Cup is offering big rewards for exploits targeting OSs, smartphones, enterprise software, browsers, and security products.

The post $2.5 Million Offered at Upcoming ‘Matrix Cup’ Chinese Hacking Contest  appeared first on SecurityWeek.

A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024.

The post Exploited Chrome Zero-Day Patched by Google appeared first on SecurityWeek.

The Ohio Lottery cyberattack conducted by the DragonForce ransomware group has impacted more than 500,000 individuals.

The post 500,000 Impacted by Ohio Lottery Ransomware Attack appeared first on SecurityWeek.

The LockBit cybercrime group has taken credit for the recent ransomware attack that disrupted City of Wichita systems.

The post LockBit Takes Credit for City of Wichita Ransomware Attack appeared first on SecurityWeek.

CISA’s Vulnrichment project is adding important information to CVE records to help improve vulnerability management processes.

The post CISA Announces CVE Enrichment Project ‘Vulnrichment’ appeared first on SecurityWeek.

F5 has patched two potentially serious vulnerabilities in BIG-IP Next that could allow an attacker to take full control of a device.

The post F5 Patches Dangerous Vulnerabilities in BIG-IP Next Central Manager appeared first on SecurityWeek.

Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco.

The post RSA Conference 2024 – Announcements Summary (Day 3) appeared first on SecurityWeek.

Zscaler says its customer, production and corporate environments are not impacted after a notorious hacker offers to sell access.

The post Zscaler Investigates Hacking Claims After Data Offered for Sale appeared first on SecurityWeek.

Healthcare cybersecurity company Blackwell Security has raised $13 million and appointed Geyer Jones as its first CEO.

The post Healthcare Cybersecurity Firm Blackwell Raises $13 Million appeared first on SecurityWeek.

Niobium has raised $5.5 million in seed funding for a fully homomorphic encryption (FHE) hardware accelerator designed for zero trust computing.

The post Niobium Raises $5.5M for Zero Trust Computing Hardware Acceleration appeared first on SecurityWeek.

Cloud security giant Wiz has raised $1 billion, which brings the total funding to $1.9 billion, at a valuation of $12 billion.

The post Wiz Raises $1 Billion at $12 Billion Valuation appeared first on SecurityWeek.

MITRE has shared more details on the recent hack, including the new malware involved in the attack and a timeline of the attacker’s activities.

The post MITRE Hack: China-Linked Group Breached Systems in December 2023 appeared first on SecurityWeek.

Synopsys is selling its Software Integrity Group to private equity firms Clearlake Capital and Francisco Partners in a $2.1 billion deal. 

The post Synopsys Sells Software Integrity Business in $2.1 Billion Deal appeared first on SecurityWeek.

CyberNut has emerged from stealth mode with a K-12-focused security awareness training solution and $800k in pre-seed funding.

The post CyberNut Emerges From Stealth With K-12 Security Awareness Training Solution appeared first on SecurityWeek.

Thirty-three cybersecurity-related merger and acquisition (M&A) deals were announced in April 2024.

The post Cybersecurity M&A Roundup: 33 Deals Announced in April 2024 appeared first on SecurityWeek.

An analysis of IoCs suggests that a Chinese threat group may be behind the recent ArcaneDoor espionage campaign targeting Cisco firewalls.

The post ArcaneDoor Espionage Campaign Targeting Cisco Firewalls Linked to China appeared first on SecurityWeek.

Microsoft has uncovered a new type of attack called Dirty Stream that impacted Android apps with billions of installations. 

The post Microsoft Warns of ‘Dirty Stream’ Vulnerability in Popular Android Apps appeared first on SecurityWeek.

The White House has published a national security memorandum focusing on critical infrastructure security and resilience.

The post White House Issues National Security Memorandum for Critical Infrastructure appeared first on SecurityWeek.

Israeli AI security firm Apex has received $7 million in seed funding for its detection, investigation, and response platform.

The post AI Security Startup Apex Emerges From Stealth With Funding From OpenAI CEO appeared first on SecurityWeek.

Verizon’s 2024 DBIR shows that vulnerability exploitation increased three times and confirmed data breaches doubled compared to the previous year.

The post Verizon DBIR 2024 Shows Surge in Vulnerability Exploitation, Confirmed Data Breaches  appeared first on SecurityWeek.

Government agencies are sharing recommendations following attacks claimed by pro-Russian hacktivists on ICS/OT systems.

The post Russian Hackers Target Industrial Systems in North America, Europe appeared first on SecurityWeek.

Dropbox says hackers breached its Sign production environment and accessed customer email addresses and hashed passwords. 

The post Hackers Compromised Dropbox eSignature Service appeared first on SecurityWeek.

An analysis conducted by Honeywell shows that much of the USB-borne malware targeting industrial organizations can still cause OT disruption.

The post Honeywell: USB Malware Attacks on Industrial Orgs Becoming More Sophisticated appeared first on SecurityWeek.

Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.

The post Palo Alto Networks Shares Remediation Advice for Hacked Firewalls appeared first on SecurityWeek.

Zero trust endpoint security company ThreatLocker has announced a $115 million Series D funding round that brings the total to $240 million. 

The post Endpoint Security Firm ThreatLocker Raises $115 Million in Series D Funding appeared first on SecurityWeek.

IBM is acquiring HashiCorp for $6.4 billion for its infrastructure lifecycle management and security lifecycle management capabilities.

The post IBM Acquiring HashiCorp for $6.4 Billion appeared first on SecurityWeek.

Google patches CVE-2024-4058, a critical Chrome vulnerability for which researchers earned a $16,000 reward. 

The post Google Patches Critical Chrome Vulnerability appeared first on SecurityWeek.

Amplifier Security has raised $3.3 million in funding for a solution that includes human-in-the-loop automation and an AI copilot.

The post Amplifier Security Emerges From Stealth With AI Copilot, Human-in-the-Loop Automation appeared first on SecurityWeek.

Nagomi Security, a company that helps customers prevent threats by leveraging existing security tools, emerged from stealth with $30 million in funding. 

The post Nagomi Security Emerges From Stealth With $30 Million in Funding appeared first on SecurityWeek.

Hive Systems conducts another study on cracking passwords via brute-force attacks, but it’s no longer targeting MD5.

The post New Password Cracking Analysis Targets Bcrypt appeared first on SecurityWeek.

Palo Alto Networks firewall vulnerability CVE-2024-3400, exploited as a zero-day, impacts a Siemens industrial product.

The post Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability appeared first on SecurityWeek.

Microsoft PlayReady vulnerabilities that could allow rogue subscribers to illegally download movies from popular streaming services.

The post Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services appeared first on SecurityWeek.

MITRE R&D network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability.

The post MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days appeared first on SecurityWeek.

Microsoft warns that several OpenMetadata vulnerabilities are being exploited to deploy cryptomining malware to Kubernetes environments.

The post OpenMetadata Vulnerabilities Exploited to Abuse Kubernetes Clusters for Cryptomining   appeared first on SecurityWeek.

United Nations Development Programme (UNDP) investigating a ransomware attack in which hackers stole sensitive data.

The post United Nations Agency Investigating Ransomware Attack Involving Data Theft appeared first on SecurityWeek.

Five Eyes cybersecurity agencies have released joint guidance on securely deploying and operating AI systems. 

The post Five Eyes Agencies Release New AI Security Guidance appeared first on SecurityWeek.

LabHost, a major phishing-as-a-service platform, has been shut down as part of a major law enforcement operation. 

The post Phishing Platform LabHost Shut Down by Law Enforcement appeared first on SecurityWeek.