SecurityWeek

Google announces the general availability of ‘rules_oci’ Bazel plugin to improve the security of container images.

The Alphv/BlackCat ransomware group claims to have stolen more than 1TB of data from Constellation Software.

An XSS vulnerability in the Advanced Custom Fields WordPress plugin exposes more than 2 million sites to attacks.

Twitter is informing users that tweets posted to their Circle may have been seen by individuals outside the Circle.

NextGen Healthcare is informing roughly 1 million individuals that their personal information was compromised in a data breach.

A $1.1 million payment was made to resolve a ransomware attack on San Bernardino county’s law enforcement computer network.

Western Digital has confirmed that a ransomware group has stolen customer and other information from its systems.

The French Senate's website was offline on Friday after pro-Russian hackers claimed to have taken it down, in just the latest such cyberattack since Russia invaded Ukraine last year.

The recently identified Fleckpe Android trojan has infected over 600,000 users in Southeast Asia via Google Play.

Google has announced a new training program for cybersecurity analysts and those who graduate will get a professional certificate from Google.

Fortinet has released patches for two high-severity vulnerabilities impacting FortiADC, FortiOS, and FortiProxy.

Vice President Kamala Harris met with the heads of companies developing AI as the Biden administration rolls out initiatives to ensure the technology improves lives without putting people’s rights and safety at risk.

Three vulnerabilities in the Azure API Management service could be exploited for internal asset access, DoS, firewall bypass, and the upload of malicious files.

A vulnerability in OpenAI’s account validation allowed anyone to obtain virtually unlimited free credit by registering new accounts with the same phone number.

Siemens recently patched a critical vulnerability affecting some of its energy ICS devices that could allow hackers to destabilize a power grid.

Google’s latest Android security updates patch over 40 vulnerabilities, including CVE-2023-0266, a kernel flaw exploited as a zero-day by a spyware vendor.

Former Uber security chief Joe Sullivan was sentenced to probation and community service for covering up the data breach suffered by the ride-sharing giant in 2016.

Fraud detection startup Moonsense has raised $4.2 million in a seed funding round co-led by Race Capital and XYZ Ventures.

Data security firm Satori has released a free and open source tool designed to help organizations find out who has access to what data and how.

Microsoft expanded public access to its generative artificial intelligence programs, despite fears that tech firms are rushing ahead too quickly with potentially dangerous technology.