SecurityWeek

Radiant Security gets $15 million in new financing as investors double down on early stage companies experimenting with AI technology.

Siemens and Schneider Electric’s Patch Tuesday advisories for November 2023 address 90 vulnerabilities affecting their products. 

Chris Wysopal is the founder and CTO of Veracode. Two decades ago, he was better known as Weld Pond, a member of the hacker collective L0pht Heavy Industries.

Google files a lawsuit against cybercriminals who delivered account-hijacking malware by offering fake Bard AI downloads. 

New report provides a detailed look into the ever-changing threats targeting APIs.

GitGuardian discovered roughly 4,000 secrets in nearly 3,000 PyPI packages, including Azure, AWS, and GitHub keys.

Denmark’s SektorCERT association shares details on a coordinated attack against the country’s energy sector.

Dragos finds no evidence of a data breach after the BlackCat ransomware group claimed to have hacked the security firm via a third party.

The ransomware and data extortion group RansomedVC announced plans to shut down the project and sell parts of its infrastructure.

McLaren Health Care is informing roughly 2.2 million individuals of a data breach impacting their personal information.

The LockBit ransomware group has leaked gigabytes of files allegedly stolen from the systems of aerospace giant Boeing. 

US mortgage giant Mr. Cooper announced that customer data was compromised in an October 31 cyberattack.

A cyberattack on Australian shipping giant DP World, which may have been a ransomware attack, has resulted in serious disruptions at major ports.

A ransomware attack that forced China’s biggest bank to take some systems offline only minimally disrupted the U.S. Treasury market.

Cavelo has raised CA$5 million (~US$3.6 million USD) to help organizations comply with data protection regulations.

Noteworthy stories that might have slipped under the radar: EU regulation enables government surveillance, US offering rewards for Iranian hackers, evolution of Chinese spying. 

A class action lawsuit has been filed against Intel over its handling of CPU speculative execution vulnerabilities, with a focus on Downfall.

France and the UK are calling for greater regulation of commercial surveillance software in the wake of recent Pegasus and Predator spyware scandals.

CISA, NSA, and ODNI issue new guidance on managing open source software and SBOMs to maintain awareness on software security.

The State of Maine says the personal information of 1.3 million individuals was compromised in the MOVEit attack.