SecurityWeek

The EU signed off on a new agreement over the privacy of people’s personal information that gets pinged across the Atlantic, aiming to ease European concerns about electronic spying by American intelligence agencies.

Private equity giant plans to buy Forcepoint’s Global Governments and Critical Infrastructure (G2CI) business unit for $2.5 billion.

Critical infrastructure services provider Ventia has taken some systems offline following a cyberattack.

Assuming NATO can play a greater part in the cybersecurity of its members, possibly through a more formal NATO Cyber Command, the question then becomes ‘what should we hope for?’

Industrial giant Honeywell wants to extend its OT cybersecurity portfolio with the acquisition of Israel-based OT/IoT security firm SCADAfence.

PoC exploit has been published for a recently patched Ubiquiti EdgeRouter vulnerability leading to arbitrary code execution.

A critical vulnerability in the Mastodon social networking platform may allow attackers to take over target servers.

Facing ransomware zero-days, Progress Software will release regular service packs to help customers mitigate critical security flaws.

Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 3, 2023.

Former contractor employee charged with hacking for accessing the systems of a water treatment facility in California to delete critical software.

In May 2023, Iran-linked cyberespionage group Charming Kitten targeted a US-based think tank with new macOS malware.

Potentially serious vulnerabilities discovered by researchers in a PiiGAB product could expose industrial organizations to remote hacker attacks.

SwSec 5D framework aims to provide a roadmap for secure software development, and its use would help improve security in the software supply chain.

Cyble has discovered more than 130,000 Photovoltaic monitoring and diagnostic solutions exposed to the internet.

Two applications hosted on Google Play, with over 1.5 million combined downloads, were caught sending user data to servers in China.

Hackers linked to the Truebot malware are exploiting a year-old Netwrix Auditor flaw to break into organizations in the U.S. and Canada.

What a cloud migration strategy did for cloud adoption, an automation implementation strategy does for security automation adoption.

JumpCloud is responding to an incident that has triggered a reset of all API keys in order to protect customers and their operations.

Google’s July 2023 security updates for Android patches 43 vulnerabilities, including three exploited in the wild.

The personal, financial, and health information of over 28,000 individuals stolen in data breach at Pepsi Bottling Ventures.