SecurityWeek

The US government slaps sanctions against six Iranian government officials linked to cyberattacks against Israeli PLC vendor Unitronics.

Prominent security vendors Okta and Proofpoint announced layoffs affecting almost 1,000 employees in the United States and Israel.

Cleaning products maker Clorox puts the impact of the damaging cyberattack at $49 million so far and expects to incur more costs in 2024.

FTC and fundraising software company Blackbaud reach settlement over poor security practices that led to a major data breach.

Joseph Garrison has received an 18-month prison sentence for accessing 60,000 DraftKings user accounts using credential stuffing.

Law enforcement in 50 countries partner to take down ransomware, banking malware, and phishing threats. 

President Biden would veto Republican lawmakers’ attempt to overturn the SEC’s recent cyber incident disclosure rules. 

A nation-state threat actor accessed internal Cloudflare systems using credentials stolen during the Okta hack.

Dutch regulators impose a 10 million euro ($10.8 million) fine on ride-hailing app Uber for lack of transparency in treating the personal data of its drivers.

Former CIA software engineer sentenced to 40 years in prison for biggest theft of classified information in CIA history and for possession of child sexual abuse images and videos.

Albania’s Institute of Statistics (INSTAT) suffered a cyberattack which affected some of its systems.

In an unprecedented move, CISA is demanding that federal agencies disconnect all instances of Ivanti Connect Secure and Ivanti Policy Secure products within 48 hours.

Snyk discloses information on Leaky Vessels, several potentially serious container escape vulnerabilities affecting Docker and others.

Video: Top US cyber officials testify on China’s cyber threat to U.S. national security and critical infrastrcuture.

Daniel James Junk sentenced to six years in prison for stealing millions in cryptocurrency through SIM swapping.

New York attorney general is suing Citibank for failing to protect customers against hackers and fraudsters who have stolen millions.

Pegasus spyware from NSO Group was used in Jordan to hack the cellphones of journalists, lawyers, human rights and political activists.

Johnson Controls confirms that the recent ransomware attack resulted in data theft and says expenses reached $27 million. 

The cybersecurity industry has taken limited action to reduce cybersecurity process friction, reduce mundane tasks and improve overall user experience.

Apple releases first security update for Vision Pro VR headset as CISA issues warning about exploitation of iOS vulnerability.