Ionut Arghire

GreyNoise has observed millions of spoofed IPs flooding internet providers with web traffic primarily focusing on TCP connections.

Edera has raised $5 million in seed funding to help organizations secure Kubernetes containers and AI workloads.

The iServer phishing-as-a-service platform was used by Spanish-speaking criminals to harvest credentials and unlock stolen and lost phones.

CISA has laid out the FOCAL plan, which aligns the collective operational defense capabilities across federal agencies.

Atlassian’s September 2024 monthly security bulletin details multiple high-severity vulnerabilities in four products.

Microsoft has observed the threat actor Vanilla Tempest targeting US healthcare organizations with INC ransomware.

GitLab has patched a critical-severity SAML authentication bypass affecting both Community Edition (CE) and Enterprise Edition (EE) instances.

Malicious hackers are caught brute-forcing Foundation Accounting Software at scale, compromising organizations in the construction industry.

CISA and the FBI have released an alert on XSS vulnerabilities, urging organizations to adopt a secure by design approach and eliminate them.

Google has released Chrome 129 with patches for nine vulnerabilities, including a high-severity bug in the V8 engine.

AT&T has agreed to pay $13 million in a settlement with the FCC over a 2023 data breach at a third-party vendor’s cloud environment.

C/side has raised $6 million in a seed-stage funding round to help organizations protect against malicious browser third-party scripts.

D-Link has released patches for critical vulnerabilities that could allow attackers to execute arbitrary code and commands on routers.

Tenable shares details on a dependency confusion attack that led to the execution of code on Google’s internal servers.

BlackCloak has raised $17 million in Series B funding to protect high-profile individuals from sophisticated cyberattacks.

Chinese national Song Wu allegedly sent spear-phishing emails to NASA, Air Force, Navy, Army, and FAA employees.

The RansomHub ransomware gang has published 487 gigabytes of data allegedly stolen from Kawasaki Motors Europe’s systems.

Microsoft warns that a recently patched Windows vulnerability was exploited in the wild as a zero-day prior to July 2024.

The Port of Seattle, which operates the SEA Airport, has confirmed that the August outage was the result of a ransomware attack.

SolarWinds has announced patches for a critical-severity remote code execution vulnerability in Access Rights Manager.