SecurityWeek

Trend Micro has released patches for a critical authentication bypass vulnerability in Trend Micro ServerProtect.Tracked as CVE-2021-36745 and featuring a CVSS score of 9.8, the security hole could be exploited by remote attackers to completely bypass authentication on a vulnerable system.

San Francisco-based cyber insurance company Coalition has raised $205 million in a Series E funding round, at a valuation of over $3.5 billion. The firm has raised more than $500 million to date.

Switzerland-based web and application security company ImmuniWeb on Tuesday announced the launch of a free online tool designed to help organizations identify unprotected cloud storage.

A prominent American cryptocurrency promoter and former hacker has pleaded guilty to advising North Korea on using virtual money to avoid international controls, a New York court said Monday.

On its 20th anniversary, the Open Web Application Security Project (OWASP) released the final version of their revised Top 10 list of the most critical risks to web applications, which includes three new categories, as well as position shifts compared to the previous report, released in 2017.

The Quad countries (Australia, India, Japan, and the United States) on Friday announced a partnership to foster the development of secure technology.

Internet security and performance company Cloudflare is celebrating its 11th anniversary this week and on Monday introduced several email security tools.

A researcher has made public the details of three unpatched iOS vulnerabilities after he became frustrated with how Apple runs its bug bounty program.The researcher, Denis Tokarev (aka illusionofchaos), disclosed his findings last week on the Russian IT blog Habr.

SenseOn, a UK-based threat detection company, today announced that it has raised $20 million in Series A funding to scale its AI-based cybersecurity platform business.

Controversial web services provider Epik last week confirmed that sensitive information pertaining to its customers was stolen in a data breach.

VMware has confirmed that the recently patched vCenter Server vulnerability tracked as CVE-2021-22005 has been exploited in the wild, and some researchers say it has been chained with another flaw that was fixed in the same round of updates.

Encrypted instant messaging app Signal was hit by a brief outage late Sunday that interrupted services on the platform at the same time as localised interruptions on other social media services.

Google has shipped an urgent Chrome update to address yet another zero-day vulnerability that has been actively exploited in attacks.Tracked as CVE-2021-37973, the security bug is described as a use-after-free issue in the Portals API, a web page navigation technology that pre-renders content when transitioning to a new page, for a seamless experience.

A threat actor is employing commercial remote access Trojans (RATs) in a series of malicious attacks targeting Indian government and military personnel, Cisco’s Talos security researchers warn.

Austin Moody wanted to apply his cybersecurity skills in his home state of Michigan, teaming up with investigators for the State Police to analyze evidence and track down criminals.But the recent graduate set the idea aside after learning an unpaid internship was his only way into the Michigan agency.

The European Union on Friday condemned alleged Russian cyber attacks that have targeted Germany in the run up to this weekend's election for Chancellor Angela Merkel's successor.

A cyberespionage group active since at least 2019 started exploiting ProxyLogon one day after the Microsoft Exchange vulnerability was publicly disclosed, ESET security researchers say.

Financially motivated threat actors have started using new code signing tricks to increase the chances of their software evading detection on Windows systems, Google’s Threat Analysis Group reported on Thursday.

SonicWall has published a security advisory and a security notice to inform customers about a critical vulnerability affecting some of its Secure Mobile Access (SMA) appliances.

South Korean electronics giant LG Electronics on Thursday announced plans to acquire Israel-based automotive cybersecurity company Cybellum for roughly $240 million.