SecurityWeek

Orca Security sues its main rival, claiming patent infringements, intellectual property theft and even marketing copycat behavior.

Multiple hardcoded accounts on the Technicolor TG670 DSL gateway router can be used to completely take over the impacted devices.

Bugcrowd’s Inside the Mind of the Hacker report shows the speed and efficiency of hackers adopting new technologies to assist their hunting

Microsoft says a Chinese cyberespionage group tracked as Storm-0558 has used forged authentication tokens to access government emails.

SecurityWeek talks to Dennis Kallelis (CSO at Idemia) and Jason Kees (CISO at Ping), two of industry’s identity giants. The idea, as always, is to discuss the role of the modern CISO.

Citrix has patched a critical-severity vulnerability in Secure Access client for Ubuntu that could lead to remote code execution (RCE).

Fortinet patches a critical-severity vulnerability in FortiOS and FortiProxy that could lead to remote code execution.

Microsoft has revoked signed drivers used for post-exploitation activity, in many cases by Chinese cybercriminals.

The need for cyber resilience arises from the growing realization that traditional security measures are no longer enough to protect systems, data, and the network from compromise.

SAP on July 2023 Security Patch Day released 16 new security notes, including one addressing a critical vulnerability in ECC and S/4HANA (IS-OIL).

Former security engineer Shakeeb Ahmed has been arrested on charges related to the defrauding of decentralized crypto exchange Crema Finance.

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Apple has pulled its latest Rapid Security Response updates for iOS and macOS after users complained that they can no longer access websites.

Savvy emerges from stealth mode with $30 million in funding, on path to secure the use of software-as-a-service (SaaS) applications.

Software maker calls special attention to CVE-2023-29300, a deserialization of untrusted data bug with a CVSS severity score of 9.8/10.

ICS Patch Tuesday: Siemens and Schneider Electric release nine new security advisories and fix 50 vulnerabilities in their industrial products.

Signing code is very important to defend against supply chain attacks, but it’s also one of the most cumbersome to implement for internal development.

HCA Healthcare says the personal information of roughly 11 million patients was stolen in a data breach.

A recent RomCom cyber operation has been targeting NATO Summit guests and other entities supporting Ukraine.

Apple rolls out urgent iOS and iPadOS software updates and warned that zero-day exploitation has already been detected.