SecurityWeek

San Francisco startup Socket raises $20 million as investors continue to bet on companies in the open source software security category.

Network-as-a-service (NaaS) solutions provider Nile has raised $175 million in a Series C funding round that brings the total raised by the firm to $300 million.

Silk Security raised $12.5 million in seed funding and is on a mission to break down the silos between security and development with an integrated ‘find and fix’ platform.

SpecterOps announces version 5.0 of BloodHound Active Directory mapping tool with enterprise-grade deployment, usability, and UI.

SecurityWeek speaks to Youssef Sammouda about using cybersecurity research and bug bounties as a way of life and source of income.

The number of ransomware attacks targeting industrial organizations and infrastructure has doubled since the second quarter of 2022, according to Dragos.

Bedding products provider Tempur Sealy says it has shut down certain systems following a cyberattack.

China has implanted malware in key US power and communications networks in a "ticking time bomb" that could disrupt the military in event of a conflict

Canon says more than 200 inkjet printer models fail to properly erase Wi-Fi configuration settings.

The Biden administration on Monday announced a series of “generational investments” to address immediate and long-term cyber workforce needs. 

To boost user privacy, Apple is requiring app developers to declare a reason to use specific APIs.

Reddit hires a 20-year cybersecurity veteran to manage its privacy and security functions as it prepares for an IPO.

Ivanti EPMM customers have been warned of CVE-2023-35081, a second zero-day vulnerability that has been exploited in targeted attacks.

CISA has shared analysis reports on three malware families obtained from an organization hacked via a recent Barracuda ESG vulnerability.

US and Australian government agencies provide guidance on addressing access control vulnerabilities in web applications.

Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 24, 2023.

The first attempts to exploit CVE-2023-24489, a recent critical Citrix ShareFile remote code execution vulnerability, have been observed.

Several industry professionals comment on the SEC’s new cybersecurity incident disclosure rules and their implications.

Zimbra has released patches for a cross-site scripting (XSS) vulnerability that has been exploited in malicious attacks.

CoinsPaid says North Korean hacking group Lazarus is likely responsible for the recent theft of $37 million in cryptocurrency.