SecurityWeek

Security researchers have discovered a way to leverage Apple’s Find My's Offline Finding network to upload data from devices, even those that do not have a Wi-Fi or mobile network connection.

Rapid7 says unauthorized third-party accessed source code, customer data during Codecov supply chain breach

Gartner believes it will be four years before the market achieves two-thirds of the position a WSJ Intelligence and Forcepoint survey says is already achieved

President Joe Biden said Thursday that Vladimir Putin was not connected to a Russia-based criminal cyber attack on a huge US fuel pipeline but that he will raise the issue at an expected summit.

Citrix this week announced that it has patched a local privilege escalation vulnerability in the Citrix Workspace app for Windows.

Data breaches from 2020 show that not much has changed over the last year: businesses continue to struggle with the basics of securing web apps, cloud deployments and educating employees

Organizations in the aerospace and travel sectors have been targeted in the past months in a campaign aimed at infecting victims with remote access Trojans (RAT) and other types of malware, Microsoft warns.

Query.AI officially launched on Thursday with a security investigations platform and $4.6 million in seed funding.The funding came from ClearSky Security, DNX Ventures, and South Dakota Equity Partners, and Query.AI says it will be used to accelerate adoption of its product.

Automation can’t be just about running the process, but must include three important stages

U.K. Foreign Secretary Dominic Raab on Wednesday urged global cooperation to combat cyberattacks by “hostile state actors” and criminal gangs.Raab also pledged 22 million pounds ($31 million) in support to “vulnerable” countries in Africa and the Indo-Pacific to improve their digital defense capacity.

Norway-based green energy solutions provider Volue has been working on restoring systems after being targeted in a ransomware attack.

An outside audit three years ago of the major East Coast pipeline company hit by a cyberattack found “atrocious” information management practices and “a patchwork of poorly connected and secured systems,” its author told The Associated Press.

President Joe Biden signed an executive order Wednesday meant to strengthen U.S. cybersecurity defenses in response to a series of headline-grabbing hacking incidents that highlight how vulnerable the country’s public and private sectors are to high-tech spies and criminals operating from half a world away.

Asset and security control management provider Panaseer on Wednesday announced a new $26.5 million round of funding, bringing the total investment in the company up to $43 million.

UK's National Cyber Security Centre highlights the success of its Active Cyber Defence (ACD) program

In 2020, Apple removed or rejected hundreds of thousands of applications from the App Store for engaging in various forms of fraudulent behavior, including spam, mischief, and privacy violations.

Following the ransomware attack that impacted the pipeline operated by Georgia-based Colonial Pipeline, security firms are providing detailed information on the cybercriminal gang behind the attack.

Acquisition will extend Jamf’s Zero Trust Network Access, threat defense and data policy enforcement for Apple devices