Cyberwarfare
Microsoft says an APT group tracked as Storm-0062 has been hacking Confluence installations since mid-September, three weeks before Atlassian’s disclosure.
Hi, what are you looking for?
SecurityWeek
Incident Response
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
Artificial Intelligence
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
ICS/OT
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Incident Response
Adobe Commerce customers exposed to code execution, privilege escalation, arbitrary file system read, and security feature bypass attacks.
Data Breaches
The fundraising software company Blackbaud has agreed to pay $49.5 million to settle claims brought by the attorneys general of 49 states and Washington,...
Cloud Security
Cisco warns that unauthenticated, remote attackers can log into devices using root account, which has default, static credentials that cannot be changed or deleted.
Incident Response
Rapid7 says attackers are targeting a critical pre-authentication flaw in Progress Software’s WS_FTP server just days after disclosure.
Cloud Security
Israeli security startup Gem Security has raised a total of $34 million to tackle cloud threat detection and incident response.
Incident Response
DHS has published a new set of recommendations to help federal agencies better report cyber incidents and protect critical infrastructure.
Cybercrime
Clorox says the recent cyberattack has been contained, but production is still not fully restored and there is a short supply of products.
Data Breaches
The hijacked data includes driver’s license numbers and/or social security numbers from a Caesars Entertainment loyalty database.
Cybersecurity Funding
Estonian DFIR company Binalyze has raised $19 million in a Series A funding round to grow and improve its product.
Incident Response
United Airlines flights were halted nationwide on Sept. 5, because of an “equipment outage,” according to the FAA.
Incident Response
Apple rolls out urgent iOS and iPadOS software updates and warned that zero-day exploitation has already been detected.
Funding/M&A
New York startup $30 million in new financing to fuel plans to take advantage of the demand for AI-powered threat-intel security tools.
Government
The US government's cybersecurity agency adds VMware and Roundcube server flaws to its Known Exploited Vulnerabilities (KEV) catalog.
Incident Response
St. Margaret’s Health in Illinois is shutting down hospitals partly due to a 2021 ransomware attack that caused serious payment system disruptions.
Incident Response
Regardless of the use case your security organization is focused on, you’ll likely waste time and resources and make poor decisions if you don’t...
Funding/M&A
Huntress closes a $60 million Series C financing round led by Sapphire Ventures. The company has now raised $118 million.
ICS/OT
ICS cybersecurity vendor Dragos discloses breach and data theft but says ransomware group failed at elaborate extortion scheme.
Incident Response
For the second month in a row, Microsoft patches an already-exploited vulnerability in its flagship Windows operating system.
Incident Response
Tel Aviv- and Boston-based CardinalOps has extended its detection posture management capability with MITRE ATT&CK Security Layers.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)