SecurityWeek

The U.S. government’s cybersecurity agency has updated its catalog of “known exploited vulnerabilities” and set deadlines for federal agencies to apply fixes for security defects in software made by Qualcomm, Mikrotik, Zoho and the Apache Software Foundation.

Another $10 million has been raised by Karamba Security, an Israel-based company that provides products and services for securing industrial, automotive, enterprise and consumer IoT systems.

Blockchain security provider CertiK on Wednesday announced that it has closed an $80 million Series B2 funding round, the third within four months.The company has raised over $140 million to date, with the latest investment round, the largest so far, boosting CertiK’s valuation close to the billion dollar mark.

Mozilla on Wednesday announced the rollout of patches for a critical vulnerability in the NSS (Network Security Services) cross-platform cryptographic library.

A Russian national who founded and led a bulletproof hosting organization was sentenced to 60 months in prison in the United States.

The Los Angeles branch of Planned Parenthood was hit by a data breach involving about 400,000 patients, but there is no indication that the information was used “for fraudulent purposes,” the group said.

The hacker attack disclosed by Ubiquiti in January 2021 was actually conducted by a former employee, according to the Justice Department, which announced charges against the individual on Wednesday.

The surge in venture capital bets on startups in the nascent attack surface management business continued apace Wednesday with Israeli risk management firm CyCognito announcing a new $100 million funding round.

The past year has been quite challenging and tiring for many IT and security professionals, as threat actors capitalized on the rapidly changing environment created by accelerated digitalization and cloud transformation in response to the COVID-19 pandemic.

Aqua Security, a cloud security company specializing in containers, on Wednesday announced the acquisition of software development security firm Argon. Both companies are based in Israel.Aqua told SecurityWeek that the acquisition price is in the tens of millions of dollars.

Multiple Vulnerabilities Found in More Than 150 HP Printer Models; Critical Flaw Could Allow Attackers to Move LaterallyVulnerabilities in more than 150 multi-function printers from HP demonstrate that any type of device that connects to a network can expand the perceived threat surface.

Chronicle-owned VirusTotal this week announced VirusTotal Collections, a new resource aimed at making it easier for security researchers to share Indicators of Compromise (IoCs).

A Missouri man has been sentenced to 10 months in prison for his role in a SIM swapping scheme that resulted in the theft of millions of dollars.

Honeywell Quantum Solutions and Cambridge Quantum on Tuesday announced that they have merged to create Quantinuum, which they have described as the “world’s largest integrated quantum computing company.”

SecurityWeek speaks to Steve Katz, widely known as the world’s first Chief Information Security Officer (CISO).

Security researchers with Symantec believe that the Yanluowang ransomware is operated by a threat actor that was previously affiliated to the FiveHands group.

Over the past couple of years, a threat actor tracked as WIRTE has continued its assaults on entities in the Middle East using “living off the land” techniques, Kaspersky reports.

Privacy-focused technology startup Soveren on Tuesday announced it has closed a $6.5 million seed round led by firstminute capital. Northzone also invested in the startup, along with multiple private investors.