SecurityWeek

A Chinese threat actor has been observed targeting organizations in multiple industries to deploy web skimmers on online payment pages.

CISA says Owl Labs video conferencing device vulnerabilities that require the attacker to be in close range exploited in attacks

A dozen cybersecurity-related M&A deals were announced in the first half of September 2023.

Exposed data includes backup of employees workstations, secrets, private keys, passwords, and over 30,000 internal Microsoft Teams messages.

Google Chromebooks released from 2021 and onwards will receive automatic updates, including security patches, for 10 years.

A silicon root of trust (S-RoT) is designed to provide security to those parts of a device that can be attacked by a third party. The question remains, however: can the S-RoT itself be attacked?

The pro-Russian cybercrime group tracked as NoName057(16) is launching DDoS attacks against Canadian organizations.

Fortinet has released patches for a high-severity cross-site scripting vulnerability impacting its enterprise firewalls and switches.

MGM Resorts and Caesars Entertainment hit by cyberattacks, shattering the image of impenetrable casino security.

CISA has released new guidance on how federal agencies can integrate identity and access management into their ICAM architecture.

European regulators slapped TikTok with a $368 million fine for failing to protect children’s privacy, the first time that the popular short video-sharing app has been punished for breaching Europe’s strict data privacy rules.

ICS/OT security firm Dragos has raised $74 million in a Series D extension funding round that brings the total to $440 million.

California state Legislature has passed the Delete Act to allow individuals to order data brokers to delete their personal data — and to cease acquiring and selling it in the future.

Russian hacker Dariy Pankov has pleaded guilty to computer fraud and now faces a maximum penalty of five years in federal prison.

The Pentagon has published an unclassified summary of its 2023 Cyber Strategy, outlining both offensive and defensive plans. 

Search giant Google has agreed to a $93 million settlement with the state of California over its location-privacy practices.

Noteworthy stories that might have slipped under the radar: China blames NSA for a cyberattack, AI jailbreaks, and Netography spin-off.

Deduce has raised $9 million in a new funding round led by Freestyle Capital, to launch its AI-generated identity fraud prevention platform.

The financially motivated UNC3944 group that hacked MGM has hit at least 100 organizations, mainly in the US and Canada.

A recently introduced Google account sync feature has been blamed after sophisticated hackers attacked 27 cryptocurrency firms via Retool.