SecurityWeek

Shift5 founder Josh Lospinoso discusses AI and how software vulnerabilities in weapons systems are a major threat to the U.S. military.

Cybersecurity news that you may have missed this week: the spyware used by various governments, new vulnerabilities, industrial security products, and Linux router attacks.

OpenAI plans to shell out $1 million in grants for projects that empower defensive use-cases for generative AI technology.

Los Angeles startup Galvanick scores $10 million seed capital to build a modern industrial detection and response platform.

Point32Health says the personal and protected health information of 2.5 million Harvard Pilgrim Health Care subscribers was stolen in a recent ransomware attack.

The US and Korea are warning of North Korean social engineering attacks targeting employees of think tanks, academic and research institutions, and news media organizations.

Splunk has resolved multiple high-severity vulnerabilities in Splunk Enterprise, including bugs in third-party packages used by the product.

Two eastern Idaho hospitals and their clinics are working to resume full operations after a cyberattack on their computer systems.

Enzo Biochem says the clinical test information of roughly 2.47 million individuals was exposed in a recent ransomware attack.

Apple has denied working with any government to add backdoors to its products after Russia accused the company of helping the NSA hack iPhones.

A zero-day vulnerability in Progress Software’s MOVEit Transfer product has been exploited to hack organizations and steal their data.

Google is offering a bug bounty reward of up to $180,000 for a full chain exploit leading to a sandbox escape in the Chrome browser.

Kaspersky said its corporate network has been targeted with a zero-click iOS exploit, just as Russia's FSB said iPhones have been targeted by US intelligence.

Toyota says improper cloud configurations exposed vehicle and customer information in Japan and overseas for years.

Cisco is in the process of acquiring email security firm Armorblox for its predictive and generative artificial intelligence (AI) technology.

Critical authentication bypass and high-severity command injection vulnerabilities have been patched in Moxa’s MXsecurity product.

The FTC charged Amazon-owned Ring with failing to implement basic protections to stop hackers or employees from accessing people's devices or accounts.

Salesforce ghost sites — domains that are no longer maintained but still accessible — can expose personal information and business data.

Adobe is inviting security researchers to join its private bug bounty program on the HackerOne platform.

Faronics patches critical-severity remote code execution (RCE) vulnerabilities in the Insight education software.