SecurityWeek

Google has created a dedicated AI Red Team tasked with carrying out complex technical attacks on artificial intelligence systems.

Three vulnerabilities in Apache OpenMeetings could be exploited by attackers to take over an administrator account and execute arbitrary code remotely.

VirusTotal has provided clarifications on the recent data leak that resulted in the exposure of information on 5,600 of the threat analysis service’s customers.

Watch Cloud & Data Security Summit sessions to learn how to utilize tools, controls, and design models needed to properly secure cloud environments.

Amazon, Google, Meta, Microsoft, OpenAI and other tech firms have voluntary agreed to AI safeguards set by the White House.

North Korean hackers are targeting employees at technology firms with repository invitations and malicious NPM packages.

Tampa General Hospital has started informing patients that their personal information was stolen in a ransomware attack.

CISA says the new Citrix zero day vulnerability tracked as CVE-2023-3519 has been exploited against a critical infrastructure organization.

Two new serious vulnerabilities in AMI BMC, which is used by millions of devices, can allow attackers to take control of systems and cause physical damage.

SentinelOne has linked the recent JumpCloud cyberattack to North Korean hackers, based on the published IoCs.

Estée Lauder has confirmed suffering a data breach just as two ransomware groups claimed to have targeted the company, both allegedly stealing vast amounts of information.

While traditional security awareness teaches users how to recognize social engineering, new behavior changing trains the brain on the correct recognition and response to phishing. 

Multiple DDoS botnets have been observed targeting CVE-2023-28771, a Zyxel firewall vulnerability patched in April.

The Rust-based peer-to-peer worm ‘P2PInfect’ is targeting a Lua sandbox escape vulnerability in internet-accessible Redis servers.

Securing APIs is a noble, though complex journey. Security teams can leverage these 10 steps to help secure their APIs.

The recently discovered SophosEncrypt ransomware is impersonating the cybersecurity firm Sophos.

Adobe releases a second round of patches for recent ColdFusion vulnerabilities, including flaws that have been exploited in attacks.

Famed hacker Kevin Mitnick has died after a battle with pancreatic cancer.  At the time of his death, he was Chief Hacking Officer at security awareness training firm KnowBe4.

Facing intense pressure after Chinese APT hack, Microsoft plans to expand logging defaults for lower-tier M365 customers.

Norwegian recycling giant Tomra says internal systems have been taken offline to contain an extensive cyberattack.