Ionut Arghire

SolarWinds patches high-severity flaws in its Access Rights Manager product, including three unauthenticated remote code execution issues.

The District of Columbia Board of Elections says full voter roll compromised in a recent data breach at hosting provider DataNet.

The RagnarLocker ransomware group’s dark web leak site has been seized in a coordinated law enforcement operation.

Silicon Valley fraud detection startup attracts $15 million in new financing from SignalFire, Legion Capital and Rally Ventures.

Iran-linked hacking group Crambus spent eight months inside a compromised network of a Middle Eastern government, Broadcom’s Symantec cybersecurity unit reports.

Australian startup CipherStash raises $3 million in seed funding for technology that keeps data encrypted in use.

CISA, NSA, FBI, and MS-ISAC have released guidance and prevention recommendations on common phishing techniques.

Google improves Android devices’ proactive protections against malware with real-time scanning at code level.

Multiple North Korean hacking groups have exploited a recent TeamCity vulnerability and Microsoft warns of potential supply chain attacks.

Former Navy IT manager Marquis Hooper was sentenced to prison for stealing PII and selling it on the dark web.

Fingerprint has raised $33 million in a Series C funding round to expand presence into the enterprise market.

Oracle on Tuesday released 387 new security patches that address 185 vulnerabilities in its code and third-party components.

Mandiant says the recently patched Citrix NetScaler vulnerability CVE-2023-4966 had been exploited as zero-day since August.

Anonybit has raised $3 million in seed funding extension for its biometric authentication and data protection solutions.

NSA has released Elitewolf, a repository of intrusion detection signatures and analytics for OT environments.

CISA, FBI, and MS-ISAC warn of potential widespread exploitation of CVE-2023-22515, a critical vulnerability in Atlassian Confluence.

A critical vulnerability in the Royal Elementor WordPress plugin has been exploited as a zero-day since August 30.

Australian AI researchers teach an unmanned military robot’s operating system to identify MitM cyberattacks.

Microsoft is adding new features to the Kerberos protocol, to eliminate the use of NTLM for Windows authentication.

UK’s financial watchdog FCA imposes a £11 million (approximately $13.5 million) fine to Equifax over the 2017 data breach.