Ionut Arghire

The US Department of Energy is offering $70 million in funding to improve the cybersecurity of rural and municipal utilities.

Wisconsin teenager Joseph Garrison has admitted in court to launching a credential stuffing attack on a betting website.

Bug hunters uncover over a dozen exploitable vulnerabilities in tools used to build chatbots and other types of AI/ML models.

Researchers uncover the activities of Appin, a hack-for-hire Indian firm involved in espionage, surveillance, and disruptive attacks.

Aikido Security has raised €5 million (~$5.4 million) in seed funding for an all-in-one application security platform.

Microsoft provided guidance on an Azure CLI bug leading to the exposure of sensitive information through GitHub Actions logs.

CISA details its efforts to promote the use of AI in cybersecurity and guide critical infrastructure in adopting AI.

SAP released a hotfix for a critical-severity improper access control vulnerability in Business One product installation.

Researchers warn attackers are targeting MySQL servers and Docker hosts to plant malware capable of launching distributed DDoS attacks.

CISA says Royal ransomware has targeted 350 organizations to date, demanding over $275 million in ransoms.

GitGuardian discovered roughly 4,000 secrets in nearly 3,000 PyPI packages, including Azure, AWS, and GitHub keys.

Denmark’s SektorCERT association shares details on a coordinated attack against the country’s energy sector.

The ransomware and data extortion group RansomedVC announced plans to shut down the project and sell parts of its infrastructure.

McLaren Health Care is informing roughly 2.2 million individuals of a data breach impacting their personal information.

US mortgage giant Mr. Cooper announced that customer data was compromised in an October 31 cyberattack.

Cavelo has raised CA$5 million (~US$3.6 million USD) to help organizations comply with data protection regulations.

CISA, NSA, and ODNI issue new guidance on managing open source software and SBOMs to maintain awareness on software security.

The State of Maine says the personal information of 1.3 million individuals was compromised in the MOVEit attack.

The Washington, DC startup is building a threat-informed defense platform that helps organizations automate detection and response work.

Checkmarx uncovers a malicious campaign targeting Python developers with malware that takes over their systems.