SecurityWeek

Officials said the visa restriction policy can apply to citizens of any country found to have misused or facilitated the malign use of spyware

Critical and high-severity Mitsubishi Electric Factory Automation vulnerabilities can allow privileged access to engineering workstations. 

Google announces $1 million investment in improving Rust’s interoperability with legacy C++ codebases.

Two high-severity vulnerabilities in QNAP’s operating system could lead to command execution over the network.

Google has released its fuzzing framework in open source to boost the ability of developers and researchers to identify vulnerabilities.

Navblue Flysmart+ Manager allowed attackers to modify aircraft engine performance calculation, intercept data.

A new ICS security report from TXOne Networks says many OT security incidents involved ransomware and vulnerability exploitation. 

AnyDesk is revoking certificates and passwords in response to a significant security breach impacting production systems.

General Timothy D. Haugh assumed command of NSA and USCYBERCOM on February 2, 2024, taking over the role from General Paul M. Nakasone.

Noteworthy stories that might have slipped under the radar: Palo Alto Networks ordered to pay $150 million in patent lawsuit, identity solutions firms get big funding, government hacker techniques. 

The US government slaps sanctions against six Iranian government officials linked to cyberattacks against Israeli PLC vendor Unitronics.

Prominent security vendors Okta and Proofpoint announced layoffs affecting almost 1,000 employees in the United States and Israel.

Cleaning products maker Clorox puts the impact of the damaging cyberattack at $49 million so far and expects to incur more costs in 2024.

FTC and fundraising software company Blackbaud reach settlement over poor security practices that led to a major data breach.

Joseph Garrison has received an 18-month prison sentence for accessing 60,000 DraftKings user accounts using credential stuffing.

Law enforcement in 50 countries partner to take down ransomware, banking malware, and phishing threats. 

President Biden would veto Republican lawmakers’ attempt to overturn the SEC’s recent cyber incident disclosure rules. 

A nation-state threat actor accessed internal Cloudflare systems using credentials stolen during the Okta hack.

Dutch regulators impose a 10 million euro ($10.8 million) fine on ride-hailing app Uber for lack of transparency in treating the personal data of its drivers.

Former CIA software engineer sentenced to 40 years in prison for biggest theft of classified information in CIA history and for possession of child sexual abuse images and videos.