Cybersecurity Funding
Noteworthy stories that might have slipped under the radar: Palo Alto Networks ordered to pay $150 million in patent lawsuit, identity solutions firms get...
Hi, what are you looking for?
SecurityWeek
Cyberwarfare
A secretive Russian military unit, previously linked to assassinations and destabilization in Europe, is blamed for destructive wiper malware attacks in Ukraine.
Malware & Threats
Google TAG publishes evidence showing identical or striking similarities between exploits used by Russia's APT29 and commercial spyware vendors.
Cyberwarfare
Amidst Volt Typhoon zero-day exploitation, Censys finds hundreds of exposed servers presenting ripe attack surface for attackers.
Nation-State
A WPS Office zero-day vulnerability tracked as CVE-2024-7262 was exploited by South Korean hacker group APT-C-60.
Cybercrime
Runa Sandvik is an inaugural member of CISA's Technical Advisory Council and the Aspen Institute's Global Cybersecurity Group, and a board member of the...
Cyberwarfare
Malware hunters catch Chinese APT Volt Typhoon exploiting a zero-day in Versa Director servers used by ISPs and MSPs.
Malware & Threats
The US government slaps sanctions against six Iranian government officials linked to cyberattacks against Israeli PLC vendor Unitronics.
Nation-State
A nation-state threat actor accessed internal Cloudflare systems using credentials stolen during the Okta hack.
Cyberwarfare
Video: Top US cyber officials testify on China’s cyber threat to U.S. national security and critical infrastrcuture.
Nation-State
The US government neutralizes a botnet full of end-of-life Cisco and Netgear routers being by a notorious Chinese APT group.
Nation-State
Ivanti is struggling to hit its own timeline for the delivery of patches for critical -- and already exploited -- flaws in its flagship...
Malware & Threats
The China-linked cyberespionage group Blackwood has been caught delivering malware to entities in China and Japan.
Email Security
HPE told the SEC that Russian state-sponsored threat group Midnight Blizzard had access to an email system for several months.
Nation-State
CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, had been exploited as zero-day for a year and a half.
Data Breaches
A Russian government-backed hacking team broke into Microsoft’s corporate network and stole emails and attachments from senior executives.
Malware & Threats
Microsoft says an APT with links to Iran’s military intelligence is impersonating a prominent journalist in clever spear-phishing attacks.
Nation-State
Ivanti confirms active zero-day exploits, ships pre-patch mitigations, but says comprehensive fixes won't be available until January 22.
Vulnerabilities
Researchers and the TSA have different views on the impact of vulnerabilities in an airport security application that could allegedly allow the bypass of...
Security Architecture
Mobile & Wireless
Endpoint Security
Vulnerabilities
