SecurityWeek

An open redirection vulnerability in the popular job search platform Indeed has been exploited in a series of phishing attacks.

Actor Tom Hanks and talk show co-host Gayle King were warning fans about ads featuring imposters generated by artificial intelligence.

The widely believed notion that the network and the cloud are two different and distinct entities is not true.

Fortinet warns of multiple malicious NPM packages that include install scripts designed to steal sensitive information.

Motel One says customer addresses and credit card information were compromised in a recent ransomware attack.

Twenty-eight cybersecurity-related merger and acquisition (M&A) deals were announced in September 2023.

The October 2023 security update for Android patches two vulnerabilities exploited in attacks, both likely linked to spyware vendors.

Companies have addressed the impact of the exploited Libwebp vulnerability CVE-2023-4863 on their products. 

Rapid7 says attackers are targeting a critical pre-authentication flaw in Progress Software’s WS_FTP server just days after disclosure.

Hackers stole a database containing the list of the European Telecommunications Standards Institute’s online users.

The number of internet-exposed ICS has dropped below 100,000, a significant decrease from the 140,000 in 2019.

DHS is reportedly investigating the impact of the recent Johnson Controls ransomware attack on its systems and facilities.

Patches are being developed for serious Exim vulnerabilities that could expose many mail servers to attacks. 

CISA has announced the Secure Our World cybersecurity awareness program, targeting both businesses and end users.

In-the-wild exploitation of a critical vulnerability in the TeamCity CI/CD server started shortly after a patch was released by developers.

Silverfort has released the source code for its lateral movement detection tool LATMA, to help identify and analyze intrusions.

Bankrupt and out of financing options, IronNet has terminated all employees and plan to file for Chapter 7 protection.

AWS says an internal threat intel decoy system called MadPot has successfully trapped nation state-backed APTs like Volt Typhoon and Sandworm.

Nexusflow scores funding to build an open-source LLM that can deliver high accuracy when retrieving data from multiple security sources.

Noteworthy stories that might have slipped under the radar: new RSA encryption attack, Meta’s AI privacy safeguards, and ShinyHunters hackers’ guilty plea.