SecurityWeek

Attackers have started exploiting CVE-2023-28121, a recent critical vulnerability in the WooCommerce Payments WordPress plugin.

New US cyber program will label smart devices that are considered safer and less vulnerable to attacks.

Daniel Kelley was just 18 years old when he was arrested and charged on thirty counts – most infamously for the 2015 hack of UK telco TalkTalk.

The British company secures $100 million in funding and announced the hiring of a new chief executive to pursue global expansion plans.

At least two new Adobe ColdFusion vulnerabilities have been exploited in the wild, including one that has not been completely patched by the software giant.

Norway's data protection agency wants to ban Facebook and Instagram owner Meta from using the personal information of users for targeted advertising, threatening a $100,000 daily fine if the company continues.

While silos pose significant dangers to an enterprise's cybersecurity posture, consolidation serves as a powerful solution to overcome these risks, offering improved visibility, efficiency, incident response capabilities, and risk management.

Conor Brian Fitzpatrick, the owner of the infamous cybercrime website BreachForums, has pleaded guilty in a US court.

JumpCloud says a sophisticated nation-state threat actor breached its systems, targeting specific customers.

The number of entities impacted by the MOVEit hack — either directly or indirectly — reportedly exceeds 340 organizations and 18 million individuals.

An analysis conducted by SecurityWeek shows that more than 210 cybersecurity-related mergers and acquisitions were announced in the first half of 2023.

Adobe patches critical code execution vulnerability in ColdFusion for which a proof-of-concept (PoC) blog exists.

Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 10, 2023.

SaaS management platform Zluri has raised $20 million in a Series B funding round led by Lightspeed.

Feedback Friday: industry professionals comment on the implications of the recently approved EU-US Data Privacy Framework.

A critical vulnerability in the Cisco SD-WAN vManage software could allow unauthenticated attackers to retrieve information from vulnerable instances.

Secure Code Warrior has raised $50 million in Series C funding to further empower developers to address code vulnerabilities.

Several instances of the Reddit alternative Lemmy were hacked in recent days by attackers who had exploited a zero-day vulnerability.

The Biden-⁠Harris administration has laid out the plan for implementing the National Cybersecurity Strategy.

Google researchers have discovered that a Zimbra zero-day vulnerability has been exploited in the wild, with users being advised to manually patch their installations.