SecurityWeek

The head of OpenAI, which makes ChatGPT, told Congress that government intervention “will be critical to mitigate the risks of increasingly powerful” AI systems.

Tech giant IBM acquires Polar Security, an early stage startup in the red-hot data security posture management (DSPM) category.

A threat actor tracked as Lancefly has been targeting government organizations in South and Southeast Asia for at least three years.

An emerging ransomware gang called RA Group is targeting organizations in the US and South Korea.

Huntress closes a $60 million Series C financing round led by Sapphire Ventures. The company has now raised $118 million.

Crosspoint Capital Partners has agreed to acquire security solutions provider Absolute Software in an $870 million deal.

Critical vulnerabilities found in Teltonika products by industrial cybersecurity firms Otorio and Claroty expose thousands of internet-exposed devices to attacks.

Brightly Software has started informing roughly three million users that their personal information was compromised in a recent data breach.

Communications and social platform Discord is notifying users of a cyber incident involving a third-party services provider.

PoC exploit targeting an XSS vulnerability in the Advanced Custom Fields WordPress plugin started being used in malicious attacks two days after patch.

The personal information of more than 5.8 million was compromised in a data breach at national pharmacy network PharMerica.

The recent ransomware attack on Capita may impact millions of customers of hundreds of pension funds in the UK.

The Philadelphia Inquirer experienced the most significant disruption to its operations in 27 years due to a cyberattack on Sunday, May 14, 2023.

Several old Linux vulnerabilities for which there are no public reports of malicious exploitation have been added to CISA’s KEV catalog.

Former ByteDance executive said China government officials maintained access to all TikTok data, including information stored in the United States.

A decade-long data breach in Toyota’s online service put some information on more than 2 million vehicles at risk.

A vulnerability in a WordPress plugin exposed the official website of sports car maker Ferrari to hacker attacks.

Spanish authorities have announced the arrest of 40 individuals for their roles in a group involved in bank fraud, identity theft, and money laundering.

SentinelOne sees multiple threat groups adopting the leaked Babuk source code to build their own VMware ESXi lockers.

Rockwell Automation customers have been informed about potentially serious vulnerabilities in several products, shortly after news of an investigation into the firm’s China operations.