SecurityWeek

The Cl0p cyber-extortion gang’s hack of the MOVEit file-transfer program popular with enterprises could have widespread global impact.

Sysdig is launching what it claims to be the first CNAPP with end-to-end detection and response, consolidating CNAPP and CDR.

Staying the course and sticking to strategic goals allows security professionals to steadily and continually improve the security posture of their organization.

VMware ships urgent patches to cover security defects that expose businesses to remote code execution attacks.

Google has released a Chrome 114 security update that patches CVE-2023-3079, the third zero-day vulnerability patched in the browser in 2023.

The Clop ransomware gang issued "an ultimatum" companies targeted in a recent large-scale hack of payroll data

US and Israeli government agencies have published new guidance on preventing malicious exploitation of remote access software.

OWASP’s ranking for the major API security risks in 2023 has been published. The list includes many parallels with the 2019 list, some reorganizations/redefinitions, and some new concepts.

Researchers show how ChatGPT/AI hallucinations can be exploited to distribute malicious code packages to unsuspecting software developers.

Blumira raises $15 million in Series B funding and launches a new XDR platform for small and medium-sized businesses (SMBs).

Microsoft will pay a fine of $20 million to settle FTC charges that it illegally collected the data of children who signed up for Xbox.

KeePass 2.54 patches a vulnerability allowing attackers to retrieve the cleartext master password from a memory dump.

AntChain has teamed up with Intel for a Massive Data Privacy-Preserving Computing Platform (MAPPIC) for AI machine learning.

Keep Aware scores seed investment to build a human-centric browser security platform that provides protection against browser-based attacks.

Google Workspace now offers support for passwordless authentication using passkeys, in beta.

French cybersecurity startup Elba raises €2.5 million ($2.6 million) to help organizations identify their employees’ security issues.

New options allow paid Zoom customers to specify certain data for meetings, webinars, and team chat to be stored within the EEA.

Major companies have confirmed being impacted by the recent MOVEit zero-day attack, including BBC, British Airways and Zellis.

Apple on Monday detailed new privacy and security features rolling out to both desktop and mobile users.

Verizon’s 16th annual Data Breach Investigations Report (DBIR) provides data on ransomware costs, the frequency of human error in breaches, and BEC trends.