SecurityWeek

Four recent vulnerabilities in the J-Web component of Junos OS have started being chained in malicious attacks after PoC exploit code was published.

GitHub Enterprise Server 3.10 released with additional security capabilities, including support for custom deployment rules.

Serious flaw affecting major BGP implementations can be exploited to cause prolonged internet outages, but several vendors have not patched it. 

While quantum-based attacks are still in the future, organizations must think about how to defend data in transit when encryption no longer works.

The DreamBus botnet has resurfaced and it has been exploiting a recently patched Apache RocketMQ vulnerability to deliver a Monero miner.

Mozilla and Google have released stable updates for the Firefox and Chrome browsers to address several memory corruption vulnerabilities.

Fianu Labs has emerged from stealth mode with a software governance automation solution and $2 million in seed funding.  

U.S. law enforcement announce the disruption of the notorious Qakbot cybercrime operation and the release of an auto-disinfection tool to 700,000 infected machines.

VWware patches critical flaws that allow hackers to bypass SSH authentication and gain access to the Aria Operations for Networks command line interface.

The newly identified MMRat Android trojan has been targeting users in Southeast Asia to remotely control devices and perform bank fraud.

ChatGPT Enterprise is a corporate edition of ChatGPT that promises “enterprise-grade security” and a commitment not to use prompts and company data to train AI models.

If an organization decides to include cyberinsurance within its total cyber risk management posture, that cyberinsurance must be fully integrated with the organization’s cybersecurity posture.

NEWS ANALYSIS: Redmond plants its feet firmly in the enterprise browser space, sending major ripples through Silicon Valley's bustling venture-backed startup ecosystem.

A new report sheds light on cybercrime scams that have become a major issue in Asia, with many workers trapped in virtual slavery.

Chinese threat actor exploiting Barracuda ESG appliances deployed persistence mechanisms in preparation for remediation efforts.

Meta has purged thousands of Facebook accounts that were part of a widespread online Chinese spam operation trying to covertly boost China and criticize the West.

PurFoods says the personal and protected health information of over 1.2 million individuals was stolen in a February 2023 ransomware attack.

Just as a professional football team needs coordination, strategy and adaptability to secure a win on the field, a well-rounded cybersecurity strategy must address specific challenges and threats.

Cybersecurity vendors SentinelOne and BlackBerry have been separately named in public acquisition chatter with a surprise suitor emerging.

The personal information of roughly 10 million individuals might have been compromised in a data breach at French unemployment agency Pole Emploi.