SecurityWeek

Microsoft releases PyRIT red teaming tool to help identify risks in generative AI through automation.

European security vendor Avast is charged with harvesting consumer web browsing data through its browser extension and anti-virus software and “and sold it without adequate notice and without consumer consent.”

Eye care practice management firm American Vision Partners faces lawsuit over data breach impacting 2.3 million patients.

Russian state-sponsored threat actor Turla has been using a new backdoor in recent attacks targeting Polish NGOs.

Threat actors are actively deploying the recently released self-replicating and self-propagating SSH-Snake worm.

Leaked documents show how Chinese authorities surveil dissidents overseas, hack other nations and promote pro-Beijing narratives online.

CISA, FBI and EPA release guidance on how Water and Wastewater Systems Sector entities can secure their environments.

Change Healthcare is experiencing network disruptions after taking systems offline in response to a cyberattack.

The US is offering big rewards for information on LockBit cybercriminals as law enforcement claims to have identified some individuals.

Ransomware insights: When ransomware first appeared, the term became associated with encrypting data. This is a misconception.

Researchers document VoltSchemer attacks that manipulate power voltage to take over commercial wireless chargers.

Security experts describe exploitation of the CVSS 10/10 flaw as “trivial and embarrassingly easy.”

A new Biden executive order to boost the cybersecurity of US ports highlights the risks associated with the use of Chinese cranes.

Apple unveils PQ3, a new post-quantum cryptographic protocol for iMessage designed to protect communications against quantum computing attacks.

Security teams need to combine the angles of client-side and server-side detection in order to have the best chance of mitigating the risk of advanced mobile malware.

Attackers weaken Redis instances to deploy the new Migo malware and install a rootkit and cryptominers.

Google and Mozilla resolve high-severity memory safety vulnerabilities with the latest Chrome and Firefox updates.

German control system solutions provider PSI Software says it is still recovering from a ransomware attack.

NSA says Rob Joyce is retiring as cybersecurity director and will be replaced by David Luber, the current deputy director of cybersecurity.

The ransomware threat is declining as actors pivot to infostealing, according to IBM, which says that attacks on cloud services and critical infrastructures are growing.