SecurityWeek

LockBit ransomware group claims to have hacked TSMC and is asking for a $70 million ransom, but the chip giant says only a supplier was breached.

New York startup $30 million in new financing to fuel plans to take advantage of the demand for AI-powered threat-intel security tools.

Rapid7 analyzes the Japan threat landscape and warns that attacks against the third-largest economy in the world have global consequences.

IP Fabric raises $25 million in new financing to build technology in the enterprise network assurance space.

The official Call for Presentations for SecurityWeek’s 2023 ICS Cybersecurity Conference, being held October 23-26, 2023 at the InterContinental Atlanta is open through Friday, June 30, 2023.

Details have been disclosed for critical SAP vulnerabilities, including a wormable exploit chain, that can expose organizations to attacks.

Researchers publish PoC for a high-severity authentication bypass vulnerability in the Arcserve UDP data backup solution.

Ann Dunkin, CIO at the Department of Energy, is more concerned about cyberattack speed than attack type or source.

Tel Aviv startup scores investment to build technology to secure in-house low-code/no-code custom applications.

The framework helps evaluate the effectiveness of obfuscation side-channel mitigation schemes against data leaks.

The White House has released a memorandum outlining the cybersecurity investment priorities for government departments and agencies for fiscal year 2025.

New guidance from CISA and the NSA provides recommendations on securing CI/CD pipelines against malicious attacks.

More victims of the MOVEit hack have come to light, with a total of over 130 organizations and 15 million people believed to be affected.

New York startup scores early stage financing to build new technology to replace virtual desktop infrastructure.

The 8Base ransomware gang has hit roughly 30 small businesses over the past month, reaching a total of approximately 80 victims since March 2022.

Ask any three people to define cyberwar and you will get three different answers. But as global geopolitics worsen and aggressive cyberattacks increase, this becomes more than an academic question.

Invary has raised $1.85 million in a pre-seed funding round led by Flyover Capital to launch its runtime integrity solution.

Astrix Security raises $25 million in Series A funding for its solution designed to help enterprises secure non-human identities.

Recorded Future underlines threats to submarine telecommunication cables, such as the risk of intentional sabotage and spying by nation-state threat actors.

Emails, phone numbers, calls logs, and collected messages stolen in data breach at Android stalkware LetMeSpy.