SecurityWeek

Major software vendors sign on to a new security initiative to create trusted best practices for artificial intelligence deployments.

Malware hunters have set eyes on an impossible to kill botnet packed with end-of-life SOHO routers and linked it to a Chinese APT targeting US critical infrastructure.

Apple is testing a new security feature that should limit what iPhone thieves can do with a stolen phone, even if they have the passcode.

MITRE and partners unveil EMB3D, a new threat model designed for critical infrastructure embedded devices.

Cybersecurity startup Zero Networks has raised $20 million in a Series B funding round led by US Venture Partners.

CISA is asking for public opinion on SCuBA secure configuration baselines for nine Google Workspace services.

A Chrome 120 security update resolves nine vulnerabilities, including five high-severity flaws reported externally.

US Senate confirms former CIA and NSA senior executive Harry Coker as next National Cyber Director in the White House ONCD.

Sophos has patched EOL Firewall versions against a critical flaw exploited in the wild, after identifying a new exploit.

Kyivstar, the largest mobile network operator in Ukraine, was hit by a massive cyberattack on Tuesday, disrupting mobile and internet communications for millions of citizens.

Microsoft warns of critical spoofing and remote code execution bugs in the Windows MSHTML Platform and Microsoft Power Platform Connector.

Adobe warned users on both Windows and macOS systems about exposure to code execution, memory leaks and denial-of-service security issues.

SAP patches multiple vulnerabilities in the Business Technology Platform, including a critical elevation of privilege bug.

New iMessage Contact Key Verification feature in Apple's iOS and macOS platforms help catch impersonators on its iMessage service.

Critical remote code execution flaws in Backup Migration and Elementor plugins expose WordPress sites to attacks.

ICS Patch Tuesday: Siemens and Schneider Electric address dozens of vulnerabilities affecting their industrial products.

Air Force disciplines 15 personnel as the inspector general finds that security failures led to massive classified documents leak.

A recent emergence on the threat landscape, the Sandman APT appears linked to a Chinese hacking group.

Toyota Germany is informing customers that their personal data has been stolen in a ransomware attack last month.

The FBI has issued guidance for SEC data breach reporting requirements and how disclosures can be delayed.