Incident Response
“Wisdom consists of the anticipation of consequences.” - Norman Cousins
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Cuttlefish malware platform roaming around enterprise SOHO routers capable of covertly harvesting public cloud authentication data from internet traffic.
Identity & Access
Venafi introduced a 90-Day TLS Readiness solution to help enterprises prepare for Google’s proposed 90-day limit for the lifecycle of a digital certificate.
Network Security
While China-linked Muddling Meerkat’s operations look like DNS DDoS attacks, it seems unlikely that denial of service is their goal, at least in the...
Identity & Access
Okta warned of a spike in credential stuffing attacks using anonymizing services such as Tor, DataImpulse, Luminati, and NSocks.
Incident Response
Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.
Nation-State
Cisco warns that nation state-backed hackers are exploiting at least two zero-day vulnerabilities in its ASA firewall platforms to plant malware on telecommunications and...
Application Security
Software maker Adobe on Tuesday released security patches for 29 documented vulnerabilities across multiple enterprise-facing products and warned that hackers could exploit these bugs...
Application Security
It’s officially a venture capital funding frenzy in the software supply chain security space.
Cybersecurity Funding
Quantum-secure networking devices maker Qunnect this week announced raising $8 million in a Series A funding round that brings the total investment in the...
Application Security
A San Francisco jury on Wednesday found former Uber security chief Joe Sullivan guilty of covering up a 2016 data breach and concealing information...
Application Security
Private equity giant KKR is expanding its big bet on penetration testing and attack surface management firm NetSPI with a new $410 million investment...
Audits
The Cybersecurity and Infrastructure Security Agency (CISA) this week published Binding Operational Directive 23-01 (BOD 23-01), which requires federal agencies to take the necessary...
Application Security
Application Security
Israeli startup LayerX has joined the list of companies scoring investor interest in the tricky enterprise browser market.LayerX, based in Tel Aviv, came out...
Application Security
Threat hunters at Microsoft have intercepted a notorious North Korean government hacking group lacing legitimate open source software with custom malware capable of data...
Application Security
The funding frenzy in the software supply chain space now includes Ox Security, an early-stage Israeli startup that just raised a whopping $34 million...
Email Security
The US government warns of a North Korean threat actor abusing weak email DMARC settings to hide spear-phishing attacks.
Data Breaches
CISO Conversations
Artificial Intelligence
Artificial Intelligence
