SecurityWeek

Incident response company BreachQuest emerged from stealth mode on Wednesday with $4.4 million in seed funding from Slow Ventures, Tinder founders Sean Rad and Justin Mateen, and Lookout founder Kevin Mahaffey.

After every company goes through digital transformation, their threat model will change in response

A White House cybersecurity gathering including Big Tech executives was set Wednesday to unveil steps aimed at improving cybersecurity following high-profile attacks which raised questions about the vulnerability of so-called critical infrastructure.

UpGuard security researchers have identified tens of Microsoft Power Apps portals that exposed millions of records due to being misconfigured.

United States-based Nokia-owned SAC Wireless has started sending notification letters to its current and former employees to inform them of a data breach that might have impacted them.

Security researchers at Citizen Lab are documenting a new Apple iOS zero-click exploit being used to hijack data from fully patched iPhones in Bahrain.Citizen Lab said it found technical evidence connecting the new exploit to the Pegasus high-end spyware tool sold by controversial Israeli software vendor NSO Group.

A hacking group claims to be in the possession of a database containing private information on roughly 70 million AT&T customers, but the telecoms company says its systems have not been breached.

The FBI on Monday published details on the activities of a cybercrime group that uses ransomware and other malware to encrypt and exfiltrate data and extort victims.

Extended detection and response (XDR) company Hunters on Tuesday announced raising $30 million in a Series B funding round, which brings the total raised by the Israel-based firm to $50.4 million.

Researchers have disclosed the details of a Zoom exploit that could have allowed malicious actors to achieve remote code execution without user interaction.

Class action lawsuits have been filed against T-Mobile over the recently disclosed data breach that has been confirmed to impact more than 50 million of the company’s customers.

A group of security researchers has identified a new distributed denial-of-service (DDoS) attack vector over TCP, which allows for reflected amplification at previously unseen levels, with amplification ratios of up to 700,000:1.

Search software giant Elastic NV is continuing its march into the cybersecurity business with Monday’s announcement of plans to acquire build.security, a red-hot Israeli startup that helps businesses enforce cloud security authorization policies.Financial terms of the acquisition were not disclosed. 

Researchers noticed that threat actors started exploiting Realtek SDK vulnerabilities shortly after their details were made public.

Security and web performance services provider Cloudflare says it identified and mitigated what appears to be the largest volumetric distributed denial-of-service (DDoS) attack to date, which peaked at 17.2 million requests-per-second (RPS).

Only time will tell if countries eventually establish proper cyber rules of engagement and punish those who break them

Organizations using security appliances from Sophos have been advised to make sure their devices are up to date after a researcher disclosed the details of a critical vulnerability patched last year.

The recently disclosed Windows Server vulnerability dubbed “PetitPotam” is being actively exploited in malicious attacks, including some aimed at deploying a piece of ransomware named LockFile.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) over the weekend issued an alert to warn of malicious actors actively exploiting the recently disclosed Microsoft Exchange vulnerabilities named ProxyShell.