Data Breaches
The fundraising software company Blackbaud has agreed to pay $49.5 million to settle claims brought by the attorneys general of 49 states and Washington,...
Hi, what are you looking for?
SecurityWeek
Compliance
With DORA’s January 2025 compliance deadline approaching, financial institutions must embrace rigorous testing, tailored threat profiles, and continuous vigilance to safeguard against cyber threats.
Government
CISA says no federal agencies other than Treasury were impacted by the recent compromise of a BeyondTrust cloud-based service.
Incident Response
Chinese hackers remotely accessed US Treasury Department workstations after compromising a cloud-based service operated by BeyondTrust.
Government
CISA has updated its National Cyber Incident Response Plan in line with the changing threat landscape and is now seeking public comment.
Cloud Security
AWS has launched Security Incident Response, a new service for quick and efficient security event management.
Incident Response
Microsoft debuts Quick Machine Recovery tool to apply fixes even when machines are unable to boot, without needing physical access.
Cloud Security
Cisco warns that unauthenticated, remote attackers can log into devices using root account, which has default, static credentials that cannot be changed or deleted.
Incident Response
Rapid7 says attackers are targeting a critical pre-authentication flaw in Progress Software’s WS_FTP server just days after disclosure.
Cloud Security
Israeli security startup Gem Security has raised a total of $34 million to tackle cloud threat detection and incident response.
Incident Response
DHS has published a new set of recommendations to help federal agencies better report cyber incidents and protect critical infrastructure.
Cybercrime
Clorox says the recent cyberattack has been contained, but production is still not fully restored and there is a short supply of products.
Data Breaches
The hijacked data includes driver’s license numbers and/or social security numbers from a Caesars Entertainment loyalty database.
Cybersecurity Funding
Estonian DFIR company Binalyze has raised $19 million in a Series A funding round to grow and improve its product.
Incident Response
United Airlines flights were halted nationwide on Sept. 5, because of an “equipment outage,” according to the FAA.
Incident Response
Apple rolls out urgent iOS and iPadOS software updates and warned that zero-day exploitation has already been detected.
Funding/M&A
New York startup $30 million in new financing to fuel plans to take advantage of the demand for AI-powered threat-intel security tools.
Government
The US government's cybersecurity agency adds VMware and Roundcube server flaws to its Known Exploited Vulnerabilities (KEV) catalog.
Data Breaches
In 2024 organizations informed the US government about 585 healthcare data breaches affecting a total of nearly 180 million user records.
Vulnerabilities
Malware & Threats
Application Security
Cisco has unveiled AI Defense, a solution designed to help organizations protect development and use of AI applications.
Malware & Threats
Cybersecurity Funding
Malware & Threats
