Incident Response
In a joint document published this week, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST)...
Hi, what are you looking for?
SecurityWeek
Supply Chain Security
Open source software (OSS) is a prime target for supply chain cyberattacks and protecting it remains a major challenge.
Funding/M&A
The deal includes certain Phylum assets, including its malicious package analysis, detection, and mitigation technology.
Supply Chain Security
The recent compromise of Cyberhaven’s Chrome extension appears to be part of a broad campaign that started over a year ago.
Supply Chain Security
Cyberhaven and other Chrome extensions were compromised in a supply chain attack targeting Facebook advertising users.
Supply Chain Security
Supply chain attack leads to decentralized application developers downloading backdoored versions of the Solana Web3.js library.
Supply Chain Security
ESET warns of a new reality: “UEFI bootkits are no longer confined to Windows systems alone.”
Incident Response
Supply Chain Security
It’s a bigger problem than is immediately apparent, and has the potential for hacks as big as Equifax and as widespread as SolarWinds.
Risk Management
The U.S. government is working to draw attention to supply chain vulnerabilities, an issue that received particular attention late last year after suspected Russian...
Supply Chain Security
Join Intel on Wednesday, March 10, at SecurityWeek’s Supply Chain Security Summit, where industry leaders will examine the current state of supply chain attacks....
Cybercrime
Ukraine’s National Security and Defense Council (NSDC) this week published two press releases describing cyberattacks aimed at the country.
Cyberwarfare
Researchers at cybersecurity firm ESET say they have uncovered an espionage campaign that has targeted online gamers in Asia through a compromised software company.
Cybercrime
The elite Russian hackers who gained access to computer systems of federal agencies last year didn’t bother trying to break one by one into...
Cybercrime
CrowdStrike, one of the cybersecurity companies called in by IT management firm SolarWinds to investigate the recently disclosed supply chain attack, on Monday shared...
Cybercrime
It is believed that the recently disclosed attack targeting Texas-based IT management solutions provider SolarWinds resulted in threat actors gaining access to the networks...
Data Breaches
In 2024 organizations informed the US government about 585 healthcare data breaches affecting a total of nearly 180 million user records.
Vulnerabilities
Malware & Threats
Identity & Access
Both human and machine identities occupy a unique position: they are simultaneously the foundation of cybersecurity and its weakest link.
