Application Security
Software supply chain security jitters escalated again Friday with new “critical severity” warnings about malware embedded in two npm package managers widely used by...
Hi, what are you looking for?
SecurityWeek
Disaster Recovery
CrowdStrike says the Falcon sensor crash that blue-screened Windows machines was caused by a "confluence" of vulnerabilities and testing gaps.
Disaster Recovery
CrowdStrike has shared a preliminary incident review, explaining why the update that caused global chaos was not caught by testing.
Disaster Recovery
CrowdStrike tested a new technique to speed up the remediation of systems impacted by the recent bad update.
Disaster Recovery
CrowdStrike says a routine sensor configuration update pushed to Windows OS triggered a logic error that blue-screened computers worldwide.
Disaster Recovery
Israeli startup raises $16 million in seed funding to build what is being described as a “cyber crisis readiness and management” platform.
Disaster Recovery
A statewide outage of the Massachusetts 911 system was the result of a firewall that blocked calls from reaching emergency responders.
Application Security
US Goverment Offers $10 Million Reward for Data on Leaders and Members of DarkSide Ransomware Operation
Application Security
The Federal Bureau of Investigation (FBI) this week issued an industry-wide notification to raise awareness about ransomware operators leveraging information on mergers, acquisitions and...
Application Security
The North Korea-linked state-sponsored hacking group Lazarus has started to target the IT supply chain in recent attacks, according to cybersecurity firm Kaspersky.
Application Security
A new product seeks to solve the two primary security issues that come with moving to the cloud: the danger of accidental misconfigurations and...
Application Security
Security responders are scrambling this weekend to assess the damage from crypto-mining malware embedded in an npm package (JavaScript library) that counts close to...
Application Security
Tech giant Microsoft has rolled out new security offering to provide non-profit organizationss with additional security in the event of a nation-state attack.
Application Security
The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) this week published a joint...
Application Security
The Linux Foundation has secured a new $10 million investment that will help expand and support the Open Source Security Foundation (OpenSSF).
Application Security
Technology giants Intel Corp. and VMware joined the Patch Tuesday parade this week, rolling out fixes for security defects that expose users to malicious...
Audits
The Microsoft Patch Tuesday freight train for October rolled in with fixes for at least 71 security defects in Windows products and components and...
Application Security
At SecurityWeek's 2021 CISO Forum, a high-powered panel of experts discussed specific ways an SBOM can improve supply chain security and where expectations may be overblown. ...
Malware & Threats
Google bundles multiple safeguards under a single Android toggle to protect high-risk users from advanced mobile malware implants.
Vulnerabilities
Malware & Threats
Mobile & Wireless
Tracking & Law Enforcement
Artificial Intelligence
Trying to block AI tools outright is a losing strategy. SaaS and AI are increasingly inseparable, and AI isn’t limited to tools like ChatGPT...
Endpoint Security
Tracking & Law Enforcement
Vulnerabilities