SecurityWeek

Washington startup Chainguard banks $61 million in new financing as investors make hefty wagers on software supply chain security companies.

Check Point reports that an Iranian APT has been observed using a new malware framework in targeted attacks in the Middle East.

Multiple threat actors are exploiting CVE-2023-4966, aka Citrix Bleed, a critical vulnerability in NetScaler ADC and Gateway.

Chrome 119 is rolling out to Linux, macOS, and Windows users with patches for 15 vulnerabilities.

MITRE announces the release of ATT&CK v14, which brings enhancements related to detections, ICS, and mobile.

There has been an ongoing debate in the security industry over the last decade or so about whether or not deep packet inspection (DPI) is dead.

Threat actors are constantly publishing malicious NuGet packages to automatically execute code on developers’ machines.

Many people are raising the alarm about AI’s as-yet-unknown dangers and calling for safeguards to protect people from its existential threats.

Graylog secured $39 million in funding to accelerate product development and scale its go-to-market operations.

Former British cyberespionage agency employee was sentenced in a London court for attempted murder, will have to serve at least 13 years in prison.

The SEC's lawsuit against the CISO of SolarWinds is leaving CISOs across the industry spooked and reevaluating their roles.

Palo Alto Networks has entered into a definitive agreement to acquire Dig Security, a provider of Data Security Posture Management (DSPM) technology.

Atlassian warns that a critical vulnerability in Confluence Data Center and Server could lead to significant data loss if exploited.

A threat actor is reportedly harvesting IAM credentials from public GitHub repositories within five minutes of exposure.

Exploitation of a critical vulnerability (CVE-2023-46747) in F5’s  BIG-IP product started less than five days after public disclosure and PoC exploit code was published.

One of the main reasons why ZTNA fails is that most ZTNA implementations tend to focus entirely on securing remote access.

The SEC filed charges against SolarWinds and its CISO over misleading investors about its cybersecurity practices and known risks.

The Chief Information Officer of Canada determined that WeChat and Kaspersky applications present an unacceptable level of risk to privacy and security.

A 20-year-old Floridian was sentenced to prison for his role in a hacking scheme that led to the theft of $1 million in cryptocurrency.

Proofpoint removes a formidable competitor from the crowded email security market and adds technology to address risk from misdirected emails.