SecurityWeek

Security researchers uncover new macOS and Windows malware associated with the North Korea-linked Lazarus Group.

The recently patched Apache ActiveMQ vulnerability tracked as CVE-2023-46604 has been exploited as a zero-day since at least October 10.

Cyberattack cripples Ace Hardware’s internal systems, resulting in shipment delays, suspended online orders.

Atlassian warns that ‘critical information’ released on the Confluence bug CVE-2023-22518 increases the risk of exploitation.

Industry commentary on the SEC lawsuit against SolarWinds and its CISO over cybersecurity and risk handling practices before the massive hack that came to light in late 2020.  

In response to a spate of embarrassing hacks, Redmond pushes ‘Secure Future Initiative’ promising faster cloud patches, better management of identity signing keys and products with a higher default security bar.

Silicon Valley startup snags $20 million in new capital and announced plans to expand beyond traditional IT environments.

Colorado startup raises new capital from Updata Partners to build out its customer authentication and authorization technology.

Former SpaceX cybersecurity engineers launch Wraithwatch, an AI-based security firm that received $8 million in seed funding. 

A recently patched Apache ActiveMQ vulnerability tracked as CVE-2023-46604 is being exploited to deliver ransomware.

Zscaler identified 117 vulnerabilities in Microsoft 365’s support for SketchUp files and bypassed initial patches.

European privacy officials have widened a ban on Meta’s “behavioral advertising” practices to most of Europe.

Boeing has confirmed that parts of its distribution business were hit by a cyberattack after a ransomware group claimed to have breached the company’s systems.

The Associated Press news website experienced an outage that appeared to be consistent with a denial-of-service attack.

Cisco has released software updates to address 27 vulnerabilities in Cisco ASA, FMC, and FTD software.

The CVSS vulnerability scoring standard is refreshed to provide more data and remove ambiguities in rating the severity of downstream issues.

Delegates from 28 nations agreed to work together to contain the potentially “catastrophic” risks posed by galloping advances in artificial intelligence.

The recent shutdown of the Mozi botnet is believed to have been carried out by its creators, possibly forced by Chinese authorities. 

VMware’s Threat Analysis Unit finds 34 new vulnerable kernel drivers that can be exploited to alter or erase firmware and escalate privileges.

Washington startup Chainguard banks $61 million in new financing as investors make hefty wagers on software supply chain security companies.