SecurityWeek

The National Security Agency has published a new yearly report detailing its cybersecurity efforts throughout 2023.

The BlackCat/Alphv ransomware group is dealing with the government operation that resulted in website seizures and a decryption tool.

The recently disclosed Xfinity data breach, which involved exploitation of the CitrixBleed vulnerability, impacts 36 million individuals

Authorities in 34 countries have cooperated to dismantle cyber-enabled scams as part of a six-month operation.

Akamai researchers document more vulnerabilities and patch bypasses leading to zero-click remote code execution in Microsoft Outlook.

The US government announced the disruption of the notorious BlackCat ransomware-as-a-service operation and released a decryption tool to help organizations recover hijacked data.

Turngate has raised $5 million in seed funding to help organizations decipher users’ identities and track their activity.

Halcyon has raised $40 million in an oversubscribed Series B funding round for its anti-ransomware and cyber resilience platform.

Every asset in an organization’s inventory that is not accounted for and protected is a potential attack vector that an attacker can use to gain access or move undetected.

Hackers, including from Russia and China, launched cyberattacks and collected information, but it did not impact the integrity and security of the 2022 US election.

Comcast’s Xfinity says customer data, including credentials, were compromised in an attack exploiting the CitrixBleed vulnerability

Mr. Cooper has confirmed that personal and bank account information was compromised in a recent cyberattack.

US and Australian government agencies warn organizations of the Play ransomware group’s double-extortion tactics.

Nearly 70% of Iran’s nearly 33,000 gas stations went out of service on Monday following possible cyberattacks, Iranian state TV reported.

CISA is advising device makers to stop relying on customers to change default passwords following attacks targeting water sector ICS.

VF Corporation (NYSE: VFC), which owns and operates some of the biggest apparel and footwear brands, has been hit by a ransomware attack that included the theft of sensitive corporate and personal data.

The US cybersecurity agency CISA issues cybersecurity recommendations for the healthcare and public health sector.

NSA has published guidance to help organizations incorporate SBOM to mitigate supply chain risks.

A new attack technique named SMTP Smuggling can allow malicious actors to send out spoofed emails that bypass authentication mechanisms.

Salvador Technologies has raised $6 million for its operational continuity and cyberattack recovery platform for ICS and OT.