SecurityWeek

IBM has disclosed a data breach involving a Janssen healthcare platform that last year helped more than 1 million patients. 

Microsoft reveals how a crash dump from 2021 inadvertently exposed a key that Chinese cyberspies later leveraged to hack US government emails.

It appears to be the end of the road for IronNet, the once-promising network security play founded by former NSA director General Keith Alexander.

Upwind raises a total of $80 million in just 10 months as investors pour cash into startups in the cloud and data security categories.

Truffle Security has discovered thousands of popular websites leaking their secrets, including .git directories and AWS and GitHub keys.

Dozens of vulnerabilities have been found in widely used security cameras made by defunct Chinese company Zavio. 

Academic researchers design a Chrome extension to steal passwords from input fields and publish it to the Chrome webstore.

Mozilla has analyzed the privacy and security of 25 major car brands and found that they collect a lot of data and can share it or sell it to third parties. 

Android’s September 2023 security update resolves a high-severity elevation of privilege vulnerability exploited in malicious attacks.

SecurityWeek talks to Alex Ionescu, a world-renowned cybersecurity expert who has combined a career as a business executive with that of a security researcher. 

Google has released another weekly Chrome update, to address four high-severity vulnerabilities reported by external researchers.

AtlasVPN developers are working on a patch for an IP leak vulnerability after a researcher publicly disclosed the flaw due to being ignored.

United Airlines flights were halted nationwide on Sept. 5, because of an “equipment outage,” according to the FAA.

Peiter ‘Mudge’ Zatko joins the US government's cybersecurity agency to preach the gospel of security-by-design and secure-by-default development principles.

MITRE and CISA introduce Caldera for OT, a new extension to help security teams emulate attacks targeting operational technology systems.

Nine vulnerabilities patched in SEL electric power management products, adding to the 19 other flaws fixed earlier this year.

Freecycle.org is prompting millions of users to reset their passwords after their credentials were compromised in a data breach.

Norfolk Southern believes a software defect — not a hacker — was the cause of the widespread computer outage that forced the railroad to park all of its trains.

Okta says some of its US-based customers have been targeted in social engineering attacks whose goal was to disable MFA and obtain high privileges.

Malicious packages uploaded to PyPI, NPM, and Ruby repositories are targeting macOS users with information stealing malware.