SecurityWeek

After Apple and Google, Mozilla has also patched an image processing-related zero-day vulnerability exploited by spyware.

Microsoft’s struggles with zero-day exploits rolled into a new month with a fresh Patch Tuesday warning about malware attacks in the wild.

Israeli security startup Zenity banks $16.5 million in new venture capital funding to work on ‘low-code/no-code’ security technology.

Adobe raises an alarm for new in-the-wild zero-day attacks hitting users of its widely deployed Adobe Acrobat and Reader product.

Despite GitHub’s efforts to prevent repository hijacking, cybersecurity researchers continue finding new attack methods, and thousands of code packages and millions of users could be at risk.

Vector embeddings – data stored in a vector database – can be used to minimize hallucinations from a GPT-style large language model AI system (such as ChatGPT) and perform automated triaging on anomaly alerts. 

Iran-linked cyberespionage group Charming Kitten has infected at least 34 victims in Brazil, Israel, and UAE with a new backdoor.

ICS Patch Tuesday: Siemens has released 7 new advisories and Schneider Electric has released 1 new advisory.

Symantec warns that the Redfly APT appears to be focusing exclusively on targeting critical national infrastructure organizations.

The next time you see CNAPP, CASB, WAAS, CSPM or many of the other phrases, it will be helpful to take a deep breath and realize enterprise security has never been a binary one or zero.

Real-time online banking fraud prevention firm Cleafy has raised €10 million ($10.7 million) in a funding round led by United Ventures.

Portuguese hacker behind “Football Leaks” convicted by a Lisbon court of nine crimes and given a suspended prison sentence of four years.

Estonian DFIR company Binalyze has raised $19 million in a Series A funding round to grow and improve its product. 

Google has released a Chrome 116 security update to patch CVE-2023-4863, the fourth Chrome zero-day vulnerability documented in 2023.

MGM Resorts confirms "cybersecurity incident" led to the shutdown of web sites and IT systems of hotels throughout the United States.

One organization is hoping to transform the anniversary of 9/11 into a day of doing good.

Anonymous Sudan launches a DDoS attack against Telegram in retaliation for the suspension of their primary account on the platform.

The personal information of more than 800,000 individuals was stolen from bookstore chain Dymocks in a cyberattack last week.

Cybercriminals breached an AP Stylebook website and obtained information on customers who were then targeted in phishing attacks. 

FBI says North Korean hacking group Lazarus has stolen $41 million in cryptocurrency from online betting platform Stake.com.