SecurityWeek

SecurityWeek’s 2023 ICS Cybersecurity Conference continues in Atlanta, with challenges and solutions the focus of Day 3.

Cisco links the espionage-focused ‘YoroTrooper’ threat actor to Kazakhstan.

Apple patches dozens of serious security flaws in its macOS and iOS platforms, warning that hackers could launch code execution exploits.

Firefox and Chrome updates released this week resolve multiple high-severity memory safety vulnerabilities.

Mandiant's Chief analyst urges critical infrastructure defenders to work on finding and removing traces of Volt Typhoon, a Chinese government-backed hacking team caught in a series of eyebrow-raising attacks against targets in Guam and the United States.

NAS devices, printers, IP cameras, speakers, and mobile phones were hacked on the first day at Pwn2Own Toronto 2023.

Russian APT Winter Vivern exploits a zero-day in the Roundcube webmail server in attacks targeting European governments.

A new project aims to make it easier for PLC programmers to implement secure coding practices by cataloging useful files and functions from each vendor.

Michigan startup raises $75 million in new funding as venture capital investors bet big on attack surface management technologies.

The Cybersecurity Resilience Quotient empowers organizations to assess their security posture comprehensively, considering asset exposure, vulnerabilities, and criticality alongside process and network architecture and disaster recovery plans.

VMware described the bug as an out-of-bounds write issue in its implementation of the DCE/RPC protocol. CVSS severity score of 9.8/10.

SecurityWeek’s 2023 ICS Cybersecurity Conference continues in Atlanta, as hundreds of industrial cybersecurity stakeholders gather for Day 2 of the annual industrial cybersecurity conference.

The City of Philadelphia says personal, health, and financial information was stolen in a cyberattack on its email environment.

Kaspersky analyzes the stealth techniques that were used in the ‘Operation Triangulation’ iOS zero-click attacks.

Rockwell Automation has warned customers about the impact of the actively exploited Cisco IOS XE zero-day on its Stratix industrial switches.

The Rise of AI in Phishing: Will future phishing attacks that leverage artificial intelligence be more dangerous?

Adlumin, a startup working on technology to boost security for mid-market firms, has banked $70 million in new funding led by SYN Ventures.

The personal information of students, applicants, alumni, and employees compromised in University of Michigan data breach.

The number of Cisco devices hacked via recent zero-days remains high, but the attackers have updated their implant.

Canada on warned of a "Spamouflage" disinformation campaign linked to China that used waves of online posts and deepfake videos.