Ionut Arghire

Google has released a Chrome 114 security update to address five vulnerabilities, including a critical-severity bug in Autofill payments.

SAP has released eight new security notes on June 2023 Security Patch Day, including two that address high-severity vulnerabilities.

Mandiant has observed a Chinese cyberespionage group exploiting a VMware ESXi zero-day vulnerability for privilege escalation.

A Romanian national who operated a bulletproof hosting service used by malware operators was sentenced to prison in the US.

St. Margaret’s Health in Illinois is shutting down hospitals partly due to a 2021 ransomware attack that caused serious payment system disruptions.

A database containing the personal information of roughly 9 million Zacks users has emerged online.

OMB has published new guidance on federal agencies obtaining security guarantees from software vendors.

Two Russian nationals are charged in the US with hacking a cryptocurrency exchange and conspiring to launder the proceeds.

Intellihartx says the personal information of roughly 490,000 individuals was compromised in the GoAnywhere zero-day attack earlier this year.

Blackpoint Cyber raises $190 million in a growth funding round led by Bain Capital Tech Opportunities.

ESET has linked several cybercrime and espionage campaigns to a threat actor tracked as Asylum Ambuscade.

Google Cloud is offering up to $1 million in financial protection to cover expenses associated with undetected cryptomining attacks.

Japanese pharmaceutical company Eisai says it has taken systems offline after falling victim to a ransomware attack.

Researchers believe North Korea-linked Lazarus Group has stolen at least $35 million in cryptocurrency from Atomic Wallet.

Cisco releases fixes for a critical-severity vulnerability in Expressway series and TelePresence Video Communication Server (VCS).

Google’s June 2023 security update for Android patches more than 50 vulnerabilities, including an Arm Mali GPU flaw exploited by spyware vendors.

US and Israeli government agencies have published new guidance on preventing malicious exploitation of remote access software.

Blumira raises $15 million in Series B funding and launches a new XDR platform for small and medium-sized businesses (SMBs).

KeePass 2.54 patches a vulnerability allowing attackers to retrieve the cleartext master password from a memory dump.

Google Workspace now offers support for passwordless authentication using passkeys, in beta.