SecurityWeek

Zyxel urges customers to update ATP, USG Flex, VPN, and ZyWALL/USG firewalls to prevent exploitation of recent vulnerabilities.

Gigabyte has announced BIOS updates that remove a recently identified backdoor feature in hundreds of its motherboards.

If after eighteen months, meaningful use of SBOMs is unachievable, we need to ask what needs to be done to fulfill Biden’s executive order.

The recent MOVEit zero-day attack has been linked to a known ransomware group, which reportedly stole data from dozens of organizations.

Thirty-six cybersecurity-related merger and acquisition (M&A) deals were announced in May 2023.

Shift5 founder Josh Lospinoso discusses AI and how software vulnerabilities in weapons systems are a major threat to the U.S. military.

Cybersecurity news that you may have missed this week: the spyware used by various governments, new vulnerabilities, industrial security products, and Linux router attacks.

OpenAI plans to shell out $1 million in grants for projects that empower defensive use-cases for generative AI technology.

Los Angeles startup Galvanick scores $10 million seed capital to build a modern industrial detection and response platform.

Point32Health says the personal and protected health information of 2.5 million Harvard Pilgrim Health Care subscribers was stolen in a recent ransomware attack.

The US and Korea are warning of North Korean social engineering attacks targeting employees of think tanks, academic and research institutions, and news media organizations.

Splunk has resolved multiple high-severity vulnerabilities in Splunk Enterprise, including bugs in third-party packages used by the product.

Two eastern Idaho hospitals and their clinics are working to resume full operations after a cyberattack on their computer systems.

Enzo Biochem says the clinical test information of roughly 2.47 million individuals was exposed in a recent ransomware attack.

Apple has denied working with any government to add backdoors to its products after Russia accused the company of helping the NSA hack iPhones.

A zero-day vulnerability in Progress Software’s MOVEit Transfer product has been exploited to hack organizations and steal their data.

Google is offering a bug bounty reward of up to $180,000 for a full chain exploit leading to a sandbox escape in the Chrome browser.

Kaspersky said its corporate network has been targeted with a zero-click iOS exploit, just as Russia's FSB said iPhones have been targeted by US intelligence.

Toyota says improper cloud configurations exposed vehicle and customer information in Japan and overseas for years.

Cisco is in the process of acquiring email security firm Armorblox for its predictive and generative artificial intelligence (AI) technology.