SecurityWeek

The BlackCat/Alphv ransomware group has taken credit for the LoanDepot and Prudential Financial attacks, threatening to sell or leak data.

Google’s new AI Cyber Defense Initiative focuses on boosting cybersecurity through artificial intelligence.

Chinese hackers use Android and iOS trojans to obtain information needed to steal money from victims’ bank accounts.

Executives from Adobe, Amazon, Google, IBM, Meta, Microsoft, OpenAI and TikTok gathered at the Munich Security Conference to announce a framework for how they respond to AI-generated deepfakes that deliberately trick voters.

Tel Aviv startup raises $8 million in Series A funding to help developers add secure access approval flows to applications.

A threat actor employed the administrative credentials of a former employee to hack a US government organization.

Civil rights groups called on an EU watchdog to rule against Facebook owner Meta's scheme to let Europeans pay to opt out of data tracking, which they say violates EU law.

Noteworthy stories that might have slipped under the radar: US hacks Iranian military vessel used for spying, Rhysida ransomware free decryption tool, NIST guidance.

The existence of a previously unknown infection technique used by spyware firm NSO Group is suggested by a single line in a contract between NSO and the telecom regulator of Ghana.

Details of eight vulnerabilities found in the open source supply chain used to develop in-house AI and ML models have been disclosed. All have CVE numbers, one has critical severity, and seven have high severity.

Three vulnerabilities in CU Solutions Group CMS exposed 275 credit unions to credential theft, account takeover.

CISA has added CVE-2020-3259, an old Cisco ASA vulnerability exploited by ransomware, to its KEV catalog. 

The US announces a $10 million reward for information on key members of the Alphv/BlackCat ransomware group.

Ukrainian national Vyacheslav Igorevich Penchukov has pleaded guilty to holding key roles in the Zeus and IcedID malware operations.

The US government says it has neutralized a network of hundreds of Ubiquiti Edge OS routers under the control of the Russia's APT28 hackers.

Hospitals around the country are at risk for attacks like the one that is crippling operations at a children’s hospital, and some say the government is doing too little prevent such breaches.

Production at five plants of German battery maker Varta has been disrupted by a cyberattack, possibly a ransomware attack.

ESET has released patches for a high-severity elevation of privilege vulnerability in its Windows security products.

Only 54% of major code changes go through a full security review, a new CrowdStrike State of Application Security report reveals.

A couple of Wi-Fi authentication bypass vulnerabilities found in open source software can expose enterprise and home networks to attacks.