Following an eight-month audit of the code in the latest infotainment system in Mercedes-Benz cars, security researchers with Tencent Security Keen Lab identified five vulnerabilities,...
Hi, what are you looking for?
SecurityWeek
The Federal Bureau of Investigation says its Internet Crime Complaint Center (IC3) received more than one million cybercrime complaints over the past 14 months.
The European Council this week announced its decision to extend for one year the framework for sanctions against cyberattacks that threaten the European Union...
An ongoing campaign abuses the Microsoft Build Engine (MSBuild) platform for the fileless delivery of malware, security researchers with threat intelligence firm Anomali reveal.
Network-attached storage (NAS) appliance manufacturer QNAP Systems says it is investigating reports of malicious attacks targeting NAS devices.
The United States Cybersecurity and Infrastructure Security Agency (CISA) has published guidance detailing the steps that organizations affected by the SolarWinds attack should take...
Application security startup ArmorCode emerged from stealth mode on Thursday after raising $3 million in a seed funding round.
Cisco this week announced the availability of patches for a high-severity vulnerability in AnyConnect Secure Mobility Client that could be exploited for code execution.
Commercial insurer CNA this week announced that it has fully restored its systems following a ransomware attack two months ago.
Security researchers have discovered a way to leverage Apple’s Find My's Offline Finding network to upload data from devices, even those that do not...
Citrix this week announced that it has patched a local privilege escalation vulnerability in the Citrix Workspace app for Windows.
Organizations in the aerospace and travel sectors have been targeted in the past months in a campaign aimed at infecting victims with remote access...
Asset and security control management provider Panaseer on Wednesday announced a new $26.5 million round of funding, bringing the total investment in the company...
In 2020, Apple removed or rejected hundreds of thousands of applications from the App Store for engaging in various forms of fraudulent behavior, including...
Following the ransomware attack that impacted the pipeline operated by Georgia-based Colonial Pipeline, security firms are providing detailed information on the cybercriminal gang behind...
SAP has released a total of six new security notes on its May 2021 Security Patch Day, along with updates for five other security...
Cycode, an Israeli startup focused on securing DevOps tools, today announced that it has raised $20 million in Series A funding, which brings the...
The University of California (UC) this week confirmed that personal information was stolen in a cyberattack involving the Accellion File Transfer Appliance (FTA) service.
Google this week announced yet another set of patches for Chrome, to address a total of 19 vulnerabilities affecting the web browser.The latest Chrome...
Google has released a new open-source tool called cosign to make it easier to manage the process of signing and verifying container images.
Mobile & Wireless
The vulnerability exploited by the Usbliter8 exploit cannot be patched and a PoC exploit has been released by researchers.
Data Breaches
Malware & Threats
Supply Chain Security
Data Protection
Squidbleed, discovered with the aid of Claude Mythos Preview, has been described as a Heartbleed-style vulnerability.
Supply Chain Security
Network Security