Incident Response
Log tampering is an almost inevitable part of a compromise. Why and how do cybercriminals target logs, and what can be done to protect...
Hi, what are you looking for?
SecurityWeek
CISO Strategy
Organizations must recognize that security is not about the number of tools deployed, it is about ensuring those tools effectively disrupt the attack chain...
Incident Response
The chief deputy attorney general of the agency sent an email on Wednesday that said nearly all of is computer systems were offline.
Incident Response
The blame of security incidents may be shared—but the burden of response always falls on the security team. Here’s how to prepare for the...
Government
The Trump administration has disbanded the Cyber Safety Review Board (CSRB), ending one of the few bright spots at CISA.
Compliance
With DORA’s January 2025 compliance deadline approaching, financial institutions must embrace rigorous testing, tailored threat profiles, and continuous vigilance to safeguard against cyber threats.
Government
CISA says no federal agencies other than Treasury were impacted by the recent compromise of a BeyondTrust cloud-based service.
Incident Response
MITRE has shared information on how China-linked hackers abused VMware for persistence and detection evasion in the recent hack.
Incident Response
Intercontinental Exchange, the company that operates NYSE and other exchanges, has agreed to pay a $10 million fine related to a 2021 hack.
Cloud Security
Financial terms were not released but the price tag is expected to be hefty with Exabeam’s most recent valuation pegged at $2.5 billion.
Data Breaches
Tech giant notifies millions of customers that full names and physical mailing addresses were stolen during a security incident.
Artificial Intelligence
Google rolls out new threat-intel and security operations products and looks to the magic of AI to tap into the booming cybersecurity market.
Incident Response
Change Healthcare Cyberattack Was Due to a Lack of Multifactor Authentication, UnitedHealth CEO says
UnitedHealth CEO Andrew Witty said in a U.S. Senate hearing that his company is still trying to understand why the server did not have...
Incident Response
UnitedHealth Group’s CEO Andrew Witty shares details on the damaging cyberattack in testimony before a US Congress committee set for May 1, 2024.
Incident Response
Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.
Funding/M&A
Irish startup Tines raises $50 million in new venture capital funding as investors make big bets on automation and orchestration startups.
Data Breaches
UnitedHealth confirms that personal and health information was stolen in a ransomware attack that could cost the company up to $1.6 billion.
CISO Strategy
Investors make an early-stage $6.5 million bet on BreachRx, a startup promising to shield cybersecurity executives from personal liability.
Artificial Intelligence
Vulnerabilities in Nvidia Riva could allow hackers to abuse speech and translation AI services that are typically expensive.
Application Security
Vulnerabilities
Malware & Threats
Malware & Threats
Exploits swirling for remote code execution vulnerability (CVE-2025-24813) in open-source Apache Tomcat web server.
Data Protection
Vulnerabilities
Malware & Threats