Cybercrime
The Russia-linked cyberespionage group that hacked IT management solutions provider SolarWinds continues to launch supply chain attacks, Microsoft warned on Monday.
Hi, what are you looking for?
SecurityWeek
Cybersecurity Funding
The funding round brings the total amount raised by the NetRise to roughly $25 million.
Malware & Threats
The flaw, tagged as CVE-2025-30406, was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog in early April.
Supply Chain Security
Researchers uncover new software supply chain threat from LLM-generated package hallucinations.
Cybercrime
Threat actors are publishing malicious NPM packages to steal PayPal credentials and hijack cryptocurrency transfers.
Application Security
Evidence shows a SpotBugs token compromised in December 2024 was used in the March 2025 GitHub Actions supply chain attack.
Supply Chain Security
Join the virtual event as we explore of the critical nature of software and vendor supply chain security issues.
Incident Response
Microsoft, Intel and Goldman Sachs will lead a new work group focusing on supply chain security at the Trusted Computing Group (TCG).
Application Security
At SecurityWeek's 2021 CISO Forum, a high-powered panel of experts discussed specific ways an SBOM can improve supply chain security and where expectations may be overblown. ...
Malware & Threats
Security researchers at Kaspersky have spotted signs of the notorious FinSpy surveillance spyware hijacking -- and replacing -- the Windows UEFI bootloader to perform...
Cybercrime
Ransomware attack on U.S. farm incurred $9 million in losses
Cybercrime
Supply chain cyberattack could have wide blast radius through compromised MSPs
Supply Chain Security
The U.S. government’s push for mandatory SBOMs has sent cybersecurity buyers and sellers scrambling to understand the ramifications and prepare for downstream side-effects.
Cloud Security
Research finds that adversaries could detect a new misconfigured container within an average of five hours
Application Security
Google wants to bring “salsa” to drive enforcement at the software supply chain security party.
Application Security
Following a major software supply chain compromise that exposed data for several major companies, developer tools startup CodeCov plans to kill off the Bash...
Incident Response
Rapid7 says unauthorized third-party accessed source code, customer data during Codecov supply chain breach
Application Security
The massive blast radius from the Codecov supply chain attack remains shrouded in mystery as security teams continue to assess the fallout from the...
Artificial Intelligence
With unapproved AI tools entrenched in daily workflows, experts say it’s time to shift from monitoring to managing Shadow AI use across the enterprise.
Vulnerabilities
Vulnerabilities
Malware & Threats
Data Breaches
Cybercrime
Noteworthy stories that might have slipped under the radar: 4chan hacked, auto-reboot security feature coming to Android, Iranian administrator of Nemesis charged in US.
Cybersecurity Funding
Data Breaches
Data Breaches
Vulnerabilities
