SecurityWeek

Automated Security Control Assessment enhances security posture by verifying proper, consistent configurations of security controls, rather than merely confirming their existence.

SAP has fixed over a dozen new vulnerabilities with its Patch Tuesday updates, including a critical flaw in its PowerDesigner product.

Researchers have disclosed the details of a new side-channel attack targeting AMD CPUs named Inception.

40 vulnerabilities have been patched by Google in the Android operating system with the release of the August 2023 security updates.

Google researcher discloses the details of an Intel CPU attack method named Downfall that may be remotely exploitable.

Restructuring plan will result in an 18% reduction in employee headcount and closing of some Rapid7 office locations.

Patch Tuesday: A month after confirming active exploitation of Office code execution flaws, Microsoft has shipped patches for multiple affected products.

Hackers may have information on tens of millions of British voters after they got access to electoral registers.

Adobe rolls out a big batch of security updates to fix at least 30 Acrobat and Reader vulnerabilities affecting Windows and macOS users.

CISA will step up training for the K-12 sector and technology providers, including Amazon Web Services and Cloudflare, will offer grants and free software.

Horizon3.ai, a provider of autonomous security testing solutions, raised $40 million through a Series C funding round.

Context helps complete the picture and results in actionable intelligence that security teams can use to make informed decisions more quickly.

Identity-based attacks have soared in the past year, according to CrowdStrike’s 2023 Threat Hunting Report.

ICS Patch Tuesday: Siemens releases a dozen advisories covering over 30 vulnerabilities, but Schneider Electric has only published one advisory.

The Royal United Services Institute (RUSI) examined the relationship between cyberinsurance and ransomware, and proposes greater reporting from victims to government, enforced through insurance policies.

The cybersecurity industry heads to Las Vegas this week for Black Hat in a state of economic contraction, confusion and excitement. Can the promise of AI overcome the hype cycle to truly solve security problems?

Microsoft has shared guidance and resources from its AI Red Team program to help organizations and individuals with AI security.

Resilience Cyber Insurance Solutions has raised $100 million through a Series D funding round to support global expansion of its cyber risk platform that was launched earlier this year.

A sanctioned Russian missile maker appears to have been targeted by two important North Korean hacking groups.

A new vulnerability in the PaperCut MF/NG print management software can be exploited for unauthenticated, remote code execution.