Application Security
Microsoft has published an analysis of the ransomware attacks associated with a subgroup of the Iran-linked advanced persistent threat (APT) actor Phosphorus.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Relentless in their methods, attackers will continue employing evasion tactics to circumvent traditional security measures.
Network Security
Two DrayTek vulnerabilities added by CISA to its KEV catalog have been exploited by multiple threat groups to steal data from organizations worldwide.
Nation-State
Hackers gained access to the switch using valid administrator credentials, and then ‘jailbroke’ from the application level into the OS level.
Identity & Access
While ZTNA can be deployed independently, it is an integral component of the SASE architecture as well.
Cybersecurity Funding
Virtual networking provider ZeroTier has raised $13.5 million in a Series A funding round led by Battery Ventures.
Network Security
In response to recent intrusions, CISA and the FBI are urging businesses and device manufacturers to eliminate OS command injection vulnerabilities at the source.
Application Security
Multiple Iranian hacking groups participated in a recent cyberattack targeting the Albanian government, according to new data from Microsoft's security research and response teams.
Application Security
Three U.S. government agencies -- Cybersecurity and Information Security Agency (CISA), the National Security Agency (NSA) and the Office of the Director of National...
Application Security
Managed detection and response (MDR) platform provider Huntress on Thursday announced the closing of a $40 million debt financing round to speed up global...
Application Security
Security researchers at Rapid7 are warning about multiple secuirty vulnerabilities impacting Baxter’s Sigma Spectrum infusion pumps, including issues that could lead to the leakage...
Application Security
Forty-one cybersecurity-related M&A deals were announced in August 2022.
Application Security
Networking solutions provider Zyxel has released patches for a critical-severity vulnerability impacting the firmware of multiple network attached storage (NAS) device models.
Application Security
Atlassian’s security response team has issued an urgent advisory to warn of a critical command injection flaw in its Bitbucket Server and Data Center...
Application Security
Password management software firm LastPass has suffered a data breach that led to the theft of source code and proprietary technical information.
Application Security
Popular streaming media platform Plex is scrambling to reset user passwords after a database hack that included the theft of emails, usernames, and encrypted...
Application Security
Virtualization technology software giant VMware on Tuesday released patches to fix an important-severity security flaw in the VMware Tools suite of utilities.The vulnerability, tracked...
Endpoint Security
A researcher from the Ben-Gurion University of the Negev in Israel has published a paper describing a method that can be used to silently...
Nation-State
Apple said there's “too significant a risk” of exposing the anti-exploit work needed to fend off the very adversaries involved in the case.
Data Breaches
Malware & Threats
Vulnerabilities
Tracking & Law Enforcement
Sanctions target five individuals linked to Intellexa Consortium as the US government expands its crackdown on commercial spyware merchants.
