Cloud Security
Cisco warns that unauthenticated, remote attackers can log into devices using root account, which has default, static credentials that cannot be changed or deleted.
Hi, what are you looking for?
SecurityWeek
Incident Response
CrowdStrike has addressed a cloud service issue causing degraded performance and boot times for some of its customers.
Incident Response
Noteworthy stories that might have slipped under the radar: KnowBe4 product vulnerabilities, SOCRadar responds to hacker's claims, and SEC ends the MOVEit hack probe.
Incident Response
CrowdStrike dismissed claims that the Falcon EDR sensor bug could be exploited for privilege escalation or remote code execution.
Incident Response
After a cybersecurity incident, what should organizations do to learn from it and improve their security posture for the future?
Incident Response
Microsoft is trying to determine “why other airlines were able to fully restore business operations so much faster than Delta.”
Disaster Recovery
CrowdStrike says the Falcon sensor crash that blue-screened Windows machines was caused by a "confluence" of vulnerabilities and testing gaps.
Incident Response
Rapid7 says attackers are targeting a critical pre-authentication flaw in Progress Software’s WS_FTP server just days after disclosure.
Cloud Security
Israeli security startup Gem Security has raised a total of $34 million to tackle cloud threat detection and incident response.
Incident Response
DHS has published a new set of recommendations to help federal agencies better report cyber incidents and protect critical infrastructure.
Cybercrime
Clorox says the recent cyberattack has been contained, but production is still not fully restored and there is a short supply of products.
Data Breaches
The hijacked data includes driver’s license numbers and/or social security numbers from a Caesars Entertainment loyalty database.
Cybersecurity Funding
Estonian DFIR company Binalyze has raised $19 million in a Series A funding round to grow and improve its product.
Incident Response
United Airlines flights were halted nationwide on Sept. 5, because of an “equipment outage,” according to the FAA.
Incident Response
Apple rolls out urgent iOS and iPadOS software updates and warned that zero-day exploitation has already been detected.
Funding/M&A
New York startup $30 million in new financing to fuel plans to take advantage of the demand for AI-powered threat-intel security tools.
Government
The US government's cybersecurity agency adds VMware and Roundcube server flaws to its Known Exploited Vulnerabilities (KEV) catalog.
Incident Response
St. Margaret’s Health in Illinois is shutting down hospitals partly due to a 2021 ransomware attack that caused serious payment system disruptions.
M&A Tracker
Financial services giant Mastercard is acquiring Recorded Future from private equity firm Insight Partners for $2.6 billion.
Malware & Threats
Vulnerabilities
Artificial Intelligence
Endpoint Security
Endpoint Security
Cybersecurity Funding
Vulnerabilities