Ryan Naraine

Black Lotus Labs estimates that more than 200,000 routers, network-attached storage servers, and IP cameras have been ensnared in the botnet.

VMware warned that an attacker with network access could send a specially crafted packet to execute remote code. CVSS severity score 9.8/10.

Intezer is looking to tap into booming market for AI-powered tooling to address the severe shortage of skilled cybersecurity professionals. 

Apple warns that attackers can use Siri to access sensitive user data, control nearby devices, or view recent photos without authentication. 

Sanctions target five individuals linked to Intellexa Consortium as the US government expands its crackdown on commercial spyware merchants.

EasyDMARC lands venture capital funding after finding traction in the email security and authentication business.

Apple said there's “too significant a risk” of exposing the anti-exploit work needed to fend off the very adversaries involved in the case.

Microsoft is revamping how anti-malware tools interact with the Windows kernel to avoid another CrowdStrike faulty update catastrophe. 

Operant AI, a startup specializing in runtime protection for cloud applications, APIs, and AI systems, secures new $10 million investment.

“It’s critical to not only back up your critical workloads, but also to secure those backups against subsequent modification and deletion."

Patch Tuesday: Microsoft raises an alarm for in-the-wild exploitation of a critical flaw in Windows Update.

Patch Tuesday: Adobe releases patches for 28 security vulnerabilities and warned of code execution risks on Windows and macOS platforms.