Supply Chain Security
A cross-tenant vulnerability in Amazon Web Services (AWS) could have allowed attackers to abuse AWS AppSync to gain access to resources in an organization’s...
Hi, what are you looking for?
SecurityWeek
Supply Chain Security
Open source software (OSS) is a prime target for supply chain cyberattacks and protecting it remains a major challenge.
Funding/M&A
The deal includes certain Phylum assets, including its malicious package analysis, detection, and mitigation technology.
Supply Chain Security
The recent compromise of Cyberhaven’s Chrome extension appears to be part of a broad campaign that started over a year ago.
Supply Chain Security
Cyberhaven and other Chrome extensions were compromised in a supply chain attack targeting Facebook advertising users.
Supply Chain Security
Supply chain attack leads to decentralized application developers downloading backdoored versions of the Solana Web3.js library.
Supply Chain Security
ESET warns of a new reality: “UEFI bootkits are no longer confined to Windows systems alone.”
Cyberwarfare
Microsoft is warning organizations about the risks associated with the discontinued Boa web server after vulnerabilities affecting the software were apparently exploited by threat...
Compliance
Last month, CISA released cross-sector cybersecurity performance goals (CPGs) in response to President Biden’s 2021 National Security Memorandum on improving cybersecurity for critical infrastructure control...
Application Security
The Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the Office of the Director of National Intelligence (ODNI) this week...
Application Security
Cybersecurity powerhouse Palo Alto Networks on Thursday announced plans to spend $195 million in cash to acquire Israeli startup Cider Security, a deal that...
Application Security
The Open Source Security Foundation (OpenSSF) on Wednesday announced the adoption of Secure Supply Chain Consumption Framework (S2C2F), a Microsoft-built framework for consuming open...
Cybercrime
Security researchers are raising alarm on an ongoing supply chain attack that uses malicious Python packages to distribute an information stealer.
Application Security
Israeli early-stage startup Akeyless has banked a whopping $65 million in venture capital funding to build technology to help businesses manage credentials, certificates, keys...
Application Security
BoostSecurity on Wednesday emerged from stealth mode with a DevSecOps automation platform and $12 million in seed funding.
Application Security
The National Security Agency (NSA) has published guidance on how organizations can implement protections against common software memory safety issues.
Cybercrime
Canadian meat giant Maple Leaf Foods has confirmed that it is experiencing an outage after falling victim to a cyberattack.
Risk Management
Government
The Treasury Department announced sanctions in connection with a massive Chinese hack of American telecommunications companies and a breach of its own computer network.
Vulnerabilities
Malware & Threats
Government
TikTok said it will have to “go dark” this weekend unless Biden assures the company it won’t enforce a shutdown after the Supreme Court...
Application Security
Data Breaches
