SecurityWeek

Cerby has raised $17 million in Series A funding for its access management platform for applications not supported by identity providers.

CISA warns that CVE-2023-26359, an Adobe ColdFusion vulnerability patched in March, has been exploited in the wild.

A critical-severity vulnerability in the Ivanti Sentry (formerly MobileIron Sentry) product exposes sensitive API data and configurations.

Cyfirma security researchers uncover the real identity of the CypherRAT and CraxsRAT malware developer and MaaS operator.

Australian lender Latitude Financial said the recent ransomware attack has cost it AU$76 million (roughly US$50 million).

The FBI, NCSC, and AFOSI warn US space industry organizations of foreign intelligence targeting and exploitation, including cyberattacks.

A Brazilian hacker claims former president Bolsonaro asked him to hack into the voting system ahead of the 2022 election.

Juniper Networks has released Junos OS updates to address J-Web vulnerabilities that can be combined to achieve unauthenticated, remote code execution.

Tesla has disclosed a data breach impacting 75,000 people, but it’s a result of a whistleblower leak, not a malicious cyberattack.

North Korea-linked "Kimsuky" hackers carried out "continuous malicious email attacks" on contractors working at the war simulation centre.

Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of August 14, 2023.

Jenkins has announced patches for high and medium-severity vulnerabilities impacting several of the open source automation tool’s plugins.

The ‘LabRat’ cryptomining and proxyjacking operation relies on signature-based tools and stealthy cross-platform malware, and abuses TryCloudflare to hide its C&Cs.

Several major companies have published advisories in response to the Downfall vulnerability affecting Intel CPUs.

Israel and US government agencies have announced plans to invest close to $4 million in projects to improve the security of critical infrastructure systems.

The National Credit Union Administration is requiring all federally insured credit unions to report cyber incidents within 72 hours of discovery.

San Francisco startup ProjectDiscovery has banked $25 million in early-stage financing as investors continue bet on cloud security vendors.

Google sprinkles magic of generative-AI into its open source fuzz testing infrastructure and finds immediate success with code coverage.

A new report from Rapid7 says a ransomware gang like Cl0p would easily be able to afford a bevy of zero-day exploits for vulnerable enterprise software.

A widespread phishing campaign utilizing malicious QR codes has hit organizations in various industries, including a major energy company in the US.