SecurityWeek

An Iran-linked hacking group tracked as Tortoiseshell has expanded its list of targets to newer industries and more geographies, according to a new warning from Facebook's security team.

Palo Alto Networks this week announced the availability of patches for security flaws in the Prisma Cloud Compute cloud workload protection solution and Windows agent for the Cortex XDR detection and response platform.

The U.S. government has announced new initiatives aimed at combating ransomware and other cyber threats, including a new website and significant rewards for information on foreign hackers.

Extended Detection and Response (XDR) can be confusing based on so many different definitions and approaches

The rise in the value of cryptocurrencies has inevitably drawn the eye of criminals, and the concentration of crypto in the cryptocurrency exchanges has focused that attention. Coinbase is the largest exchange in the U.S., and researchers have detected numerous phishing campaigns against Coinbase users.

Passwordless authentication startup Stytch this week announced that it has raised $30 million in a Series A funding round. To date, the company raised $36.3 million.The founding round was led by Thrive Capital. Coatue Management and existing investors Benchmark and Index Ventures participated as well.

Hackers gained access to the Social Security numbers of more than two dozen people during a ransomware attack that forced the city of Tulsa to shut down parts of its computer network for months, officials said.

A tailored approach to digital executive protection allows security teams to maximize resources and identify threats without relying on 24x7 physical executive protection

Prevention, detection, and response solutions provider Cybereason on Wednesday announced raising $275 million in a crossover funding round, which brings the total raised by the company to more than $663 million.

Lenovo this week published information on three vulnerabilities that impact the BIOS of two of its desktop products and approximately 60 laptop and notebook models.

Network appliance vendor SonicWall has issued an urgent security notice to warn of imminent data-encrypting ransomware attacks targeting known -- and already patched -- firmware vulnerabilities.

A newly uncovered advanced persistent threat (APT) campaign is targeting a large number of users in South Asia, including government entities, according to a new report from anti-malware vendor Kaspersky.

Industrial giants Siemens and Schneider Electric on Tuesday released a total of two dozen advisories covering roughly 100 vulnerabilities affecting their products.Siemens

Software workload protection solutions provider Virsec on Wednesday announced raising $100 million in a Series C funding round, which brings the total raised by the company to $137 million.

SecurityWeek will host its 2021 Cloud Security Summit virtual event on Wednesday, July 21, 2021.

VMware on Tuesday announced the availability of patches for vulnerabilities impacting its ESXi hypervisor, Cloud Foundation hybrid cloud platform, and ThinApp application virtualization tool.

For 21 years, the software company Kaseya labored in relative obscurity — at least until cybercriminals exploited it in early July for a massive ransomware attack that snarled businesses around the world and escalated U.S.-Russia diplomatic tensions.

China rules that all zero-day vulnerabilities must be disclosed only to the Chinese Government

Data security startup Code-X this week emerged from stealth mode, announcing the launch of its lattice-based data protection platform and a $5 million Series A funding round led by By Light Professional IT Services, with participation from fama Ventures.

Lessons from a great tour guide can help you in your efforts to improve your organization’s security posture