SecurityWeek

A top administrator with Washington’s health insurance exchange apologized to House members on Wednesday for the data breach that resulted in the disclosure of personal information for thousands of users.

Capita finally confirmed that hackers stole data after the Black Basta ransomware group offered to sell information allegedly stolen from the company.

VMware warns of two critical vulnerabilities -- CVE-2023-20864 and CVE-2023-20865 -- in the VMware Aria Operations for Logs product.

Microsoft plans to use weather-themed naming of APT actors as part of a move to simplify the way threat actors are documented.

Health insurer Point32Health takes systems offline after falling victim to ransomware attack.

The software supply chain security firm adds the Open Policy Agent to its risk analysis engine, increasing flexibility for the creation and enforcement of custom policies on the use of open source software.

3CX hack is the first known cascading supply chain attack, with the breach starting after an employee downloaded compromised software from a different firm.

Cisco this week released patches for critical-severity vulnerabilities impacting its Industrial Network Director and Modeling Labs applications.

The Air Force is investigating how a lone airman could access and distribute possibly hundreds of highly classified documents, and in the meantime has taken away the intelligence mission from the unit where the leaks took place

The UK government's information security arm warns of Russian state-aligned groups aiming to disrupt and destroy critical infrastructure in Western countries.

Print management solutions provider PaperCut warns that exploitation of a recently patched vulnerability has commenced.

Fortra has shared a summary of its investigation into the GoAnywhere zero-day incident that hit dozens of the company’s customers earlier this year.

The recent data breach of personal information for thousands of users of Washington D.C.’s health insurance exchange, including members of Congress, was caused by basic human error

Safe Security, a startup building technology to help organizations manage cyber risk, has secured a $50 million Series B funding round.

Russian national Denis Dubnikov has been sentenced to time served after he pleaded guilty to charges related to laundering money for the Ryuk ransomware group.

The Series A funding round was led by Storm Ventures and brings the total raised by Dasera to $20 million.

Discarded enterprise routers are often not wiped and contain secrets that could be highly useful to malicious hackers.

Google warns of another zero-day vulnerability in Chrome, only days after addressing a similar issue.

Oracle’s April 2023 critical patch update (CPU) includes 433 new security patches, including more than 70 that fix critical vulnerabilities.

Coro, an enterprise cybersecurity platform for mid-market organizations, has raised $75 million from Energy Impact Partners.