Cloud Security
A newly identified piece of malware that targets Windows Server containers can execute code on the underlying node and then spread in the Kubernetes...
Hi, what are you looking for?
SecurityWeek
Email Security
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
Email Security
An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.
Data Breaches
Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking.
Cybercrime
Researchers demonstrate how attackers could abuse built-in email chatbots to evade detection, impersonate trusted employees, compromise executive accounts, and facilitate financial fraud.
Cybercrime
Two members of the notorious Carbanak cybergang were sentenced to 8 years in prison, Kazakhstani authorities announced this week.
Application Security
Enterprise security vendor Cisco has shipped fixes for a wide range of severity vulnerabilities, including patches for high-risk flaws in the widely deployed Webex...
Application Security
FireEye (NASDAQ: FEYE) on Wednesday announced plans to sell its products business, including the FireEye name, as part of a $1.2 billion transaction that...
Application Security
The ongoing multi-vendor investigations into the SolarWinds mega-hack took another twist this week with the discovery of new malware artifacts that could be used...
Application Security
Accellion failed to notify customers of a zero-day vulnerability in its file transfer application (FTA) and related cyber-attacks targeting the security flaw, according to a...
Application Security
Exploits for vulnerabilities in Microsoft’s Office suite were the most popular among cyber-attackers during the first quarter of this year, according to a new...
Application Security
Exabeam, a late-stage startup in the data analytics and SIEM space, has landed a new $200 million funding round that values the company at...
Application Security
Looking to build stronger responses against cyberattacks in the Asia Pacific (APAC) region, Microsoft on Monday announced the creation of a cybersecurity council for the public...
Cybercrime
An alert released on Friday by the FBI and the DHS’s Cybersecurity and Infrastructure Security Agency (CISA) revealed that the number of organizations targeted...
Cyberwarfare
The Russia-linked threat group believed to be behind the SolarWinds attack has been observed launching a new campaign this week.
Application Security
The U.S. Justice Department this week announced indictments against 22 individuals who allegedly purchased and used payment cards stolen from a national retail chain.
Application Security
Japan's Ministry of Foreign Affairs and Ministry of Land, Infrastructure, Transport and Tourism this week confirmed impact from a data breach at service provider...
Cybersecurity Funding
Email protection company Material Security this week announced that it raised $40 million in Series B funding, which brings the capital raised by the...
Cybersecurity Funding
Tessian, an email security company that focuses on human error, today announced that it raised $65 million in Series C funding. The company has...
Cybercrime
Bitcoin scams have soared over the last seven months. The surge started around October 2020, and the scams are continuing today.
Application Security
Colonial Pipeline chief executive Joseph Blount has confirmed the company shelled out $4.4 million to purchase a decryption key to recover from the disruptive...
Application Security
Cloud-native authorization provider Styra on Tuesday announced that it closed a $40 million Series B funding round. To date, the company has raised more...
Application Security
Following an eight-month audit of the code in the latest infotainment system in Mercedes-Benz cars, security researchers with Tencent Security Keen Lab identified five vulnerabilities,...
Email Security
Organizations in the aerospace and travel sectors have been targeted in the past months in a campaign aimed at infecting victims with remote access...
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)