SecurityWeek

With proactive steps to move toward Zero Trust, technology leaders can leverage an old, yet new, idea that must become the security norm.

GAO report underlines the need for federal agencies to fully implement key cloud security practices.

Food distributor Sysco Corporation says the personal information of over 126,000 individuals was compromised in a recent cyberattack.

Satellite TV giant Dish Network says the recent ransomware attack impacted nearly 300,000 people and its notification suggests a ransom has been paid.

BEC scammers use residential IP addresses in attacks to make them seem locally generated and evade detection.

The European Union slapped Meta with a record $1.3 billion privacy fine and ordered it to stop transferring user data across the Atlantic.

China’s government told users of computer equipment deemed sensitive to stop buying products from the biggest U.S. memory chipmaker, Micron.

Samsung smartphone users warned about CVE-2023-21492, an ASLR bypass vulnerability exploited in the wild, likely by a spyware vendor.

Wisconsin teen Joseph Garrison is charged with launching a credential stuffing attack that affected roughly 60,000 user accounts.

Security researchers are warning that newly patched vulnerabilities in the Pimcore platform bring code execution risks.

Security researchers have identified the second developer of Golden Chickens, a malware suite used by financially-motivated hacking groups Cobalt Group and FIN6.

Cloudflare introduces Secrets Store, a new solution to help developers and organizations securely store and manage secrets.

Apple has patched 3 zero-days, two of which are the vulnerabilities patched with the tech giant’s first Rapid Security Response updates.

Manifest raises $6 million in seed funding to help businesses generate, collect, and manage software bill of materials (SBOMs).

Secure remote access is essential for industrial organizations, but many are concerned about the associated risks, a new study shows.

A wave of layoffs, coupled with increased recruitment efforts by cybercriminals, could create the perfect conditions for insider threats to flourish

Quantinuum claims the most powerful quantum computer currently available –through cloud-based access from Quantinuum, and available through Azure Quantum in June 2023.

Lineaje introduces SBOM360 Hub, an exchange allowing software producers, sellers, and consumers to publish, share and use SBOMs and related compliance artifacts.

Google is updating its vulnerability reports rating system to encourage researchers to provide more details on the reported bugs.

Researcher publishes PoC tool that exploits unpatched KeePass vulnerability to retrieve the master password from memory.