A security researcher claims Apple paid a $100,000 bug bounty reward for a critical vulnerability in Sign in with Apple, the company’s privacy-focused authentication...
Hi, what are you looking for?
SecurityWeek
Two researchers have discovered a new timing channel attack technique that remains effective even if multiple processes are running on a system.
The United States Department of Justice (DoJ) this week announced that a New York City man was charged for his participation in a cybercrime...
The U.S. National Security Agency (NSA) on Thursday published information on the targeting of Exim mail servers by the Russia-linked threat actor known as...
Minted, an online marketplace of crowdsourced art and graphic designs, this week confirmed that it was the victim of a data breach earlier this...
Cisco this week announced that it has patched two actively exploited Salt vulnerabilities, but not before malicious actors leveraged the flaws to hack some...
Google this week announced an expansion for its Vulnerability Rewards Program (VRP) to include critical open-source dependencies of Google Kubernetes Engine (GKE).
Crowdsourced security testing provider Synack on Thursday announced that it closed a $52 million Series D funding round, bringing the total raised by the...
Recent versions of the Valak malware have been used in attacks targeting Microsoft Exchange servers at organizations in the United States and Germany, Cybereason’s...
House Democrats on Wednesday decided to abandon a vote on the reauthorization of several government surveillance programs under the Foreign Intelligence Surveillance Act (FISA).
Apple this week released security updates to address over fifty vulnerabilities impacting macOS and Safari.
United States lawmakers this week will vote on an amendment to the surveillance bill known as the USA FREEDOM Reauthorization Act that would limit...
An updated version of the ComRAT malware that Russia-linked cyber-espionage threat actor Turla has been using in recent attacks can connect to Gmail to...
The Federal Trade Commission (FTC) has approved a settlement with Canadian smart lock maker Tapplock, which allegedly falsely claimed that its devices were designed...
The unc0ver jailbreaking tool has been updated with support for the latest iOS releases, courtesy of a zero-day vulnerability, the team behind the utility...
In a letter to the U.S. House of Representatives, several Internet organizations are urging for an amendment to the surveillance bill known as the...
Web security company ImmuniWeb this week announced a free tool that allows businesses and government organizations to check their dark web exposure.
The Ragnar Locker ransomware has been deploying a full virtual machine to ensure that it can evade detection, Sophos reveals.
Malicious actors targeting a zero-day vulnerability in Sophos XG Firewall appliances last month attempted to deploy ransomware after Sophos started taking measures to neutralize...
Encrypted messaging service Signal has announced the introduction of a new feature that allows users to recover their data if they switch to a...
Funding/M&A
The deal values industrial cybersecurity giant Dragos at $3.25 billion, and runZero and NetRise will operate under Dragos.
Data Breaches
Vulnerabilities
Hacker Conversations
Artificial Intelligence
Vulnerabilities
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
Cybersecurity Funding
Vulnerabilities
Malware & Threats
Network Security
