Data Breaches
The SEC has provided some important clarifications on its new cyber incident disclosure requirements, which come into effect on December 18.
Hi, what are you looking for?
SecurityWeek
Incident Response
Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.
Funding/M&A
Irish startup Tines raises $50 million in new venture capital funding as investors make big bets on automation and orchestration startups.
Data Breaches
UnitedHealth confirms that personal and health information was stolen in a ransomware attack that could cost the company up to $1.6 billion.
CISO Strategy
Investors make an early-stage $6.5 million bet on BreachRx, a startup promising to shield cybersecurity executives from personal liability.
Data Breaches
Cisco Duo warns that breach exposed phone numbers, phone carriers, metadata and other logs that could lead to downstream social engineering attacks.
Data Breaches
The US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts "presents a grave and unacceptable risk to federal agencies."
Data Breaches
MongoDB CISO Lena Smart said the company was not aware of any exposure to the data that customers store in the MongoDB Atlas product.
Incident Response
The court system in Kansas was hit by a cyberattack that caused outages and affected the courts in 104 counties.
Government
A new GAO report reveals that 20 out of 23 US federal agencies have not fully implemented incident response plans.
Incident Response
New Relic said hackers gained access to an environment using social engineering and stolen credentials for an employee account.
Identity & Access
Okta expands scope of October breach, saying hackers stole names and email addresses of all its customer support system users.
Incident Response
Sumo Logic has completed its investigation into the recent security breach and found no evidence of impact to customer data.
CISO Strategy
The Biden for President campaign is looking for a cybersecurity chief to “define the organization's risk appetite” and manage its cybersecurity and IT initiatives.
Incident Response
Patch Tuesday: Redmond’s security response team flags two vulnerabilities -- CVE-2023-36033 and CVE-2023-36036 -- already being exploited in the wild.
Artificial Intelligence
Radiant Security gets $15 million in new financing as investors double down on early stage companies experimenting with AI technology.
Funding/M&A
The Washington, DC startup is building a threat-informed defense platform that helps organizations automate detection and response work.
Incident Response
Offensive Security does not focus on discreet attacks, singular actors, or Indicators of compromise, but understands the entirety of both sides of the battlefield.
Cybersecurity Funding
Funding/M&A
