SecurityWeek

Digitalization brings new security challenges, new concerns, and new threats, and CISOs should not think that it’s just business as usual.

China's security and surveillance industry is focused on shoring up its vulnerabilities to the US and other outside actors, worried about risks posed by hackers, advances in AI and pressure from rival governments.

Two critical-severity authentication bypass vulnerabilities in WordPress plugins with tens of thousands of installations.

Russian anti-malware vendor shares technical details on spyware implant deployed as part of recent zero-click iMessage attacks.

Enphase Energy has ignored CISA requests to fix remotely exploitable vulnerabilities in Enphase products.

SecurityWeek talks to Chief Information Security Officers from Bill.com, FreedomPay, and Tassat about their role and experience as CISOs.

New National Security Cyber Section will help the US disrupt and prosecute nation-state threat actors and state-sponsored cybercriminals.

Why are there so many vulnerabilities in Chrome? Is it realistically safe to use? Can Google do anything to make the web browser safer?

The Biden administration wants to figure out how to regulate AI, looking for ways to nurture its potential for economic growth and national security and protect against its potential dangers.

VMware updates a critical-level bulletin: “VMware has confirmed that exploitation of CVE-2023-20887 has occurred in the wild.”

Businesses using ‘Log in with Microsoft’ could be exposed to privilege escalation and full account takeover exploits.

A Russian hacking group has been caught hacking into Roundcube servers to spy on government institutions and military entities in Ukraine.

Gen Digital, which owns Avast, Avira, AVG, Norton, and LifeLock, said employee data was compromised in the MOVEit ransomware attack.

Forescout Technologies has disclosed the details of vulnerabilities impacting operational technology (OT) products from Wago and Schneider Electric.

Bitdefender finds new malware capable of monitoring incoming RDP connections and infect the connecting clients that have client drive mapping enabled.

Nobody doubts the need to increase board level cyber expertise, but there is no single preferred route.

The Office of the Australian Information Commissioner (OAIC) says some of its files were stolen in a ransomware attack on law firm HWL Ebsworth.

Asus patched nine WiFi router security defects, including a highly critical 2018 vulnerability that exposes users to code execution attacks.

A new information stealer malware named Mystic Stealer is gaining traction among cybercriminals on prominent underground forums.

Western Digital is blocking access to its cloud services for devices running firmware versions impacted by a critical security vulnerability.