SecurityWeek

Apple on Monday shipped the long-awaited iOS and iPadOS 14.5 update with patches for at least 50 documented security vulnerabilities.The patch, which is currently being rolled out via iOS and iPadOS automatic-updating mechanism, includes cover for a WebKit vulnerability that Apple believes may have been exploited in the wild by attackers.

Oilfield services company Gyrodata last week revealed that it was recently targeted in a cyberattack that resulted in sensitive employee information being compromised.Houston, Texas-based Gyrodata provides surveying and wireline services for oil and gas, mining, and civil engineering projects.

Enterprise security vendor Proofpoint (NASDAQ: PFPT) has agreed to be acquired by private equity firm Thoma Bravo in an all-cash transaction that values Proofpoint at approximately $12.3 billion.

IoT device security startup Thistle Technologies launched last week with $2.5 million in seed funding from Silicon Valley venture capital firm True Ventures.

Roughly one million computers are getting rid of the Emotet malware after law enforcement agencies served them an update meant to trigger an uninstall process on April 25.

A technology provider says a malware attack triggered a dayslong outage that has caused reservations systems to crash at about 20 low-cost airlines around the world.The company, Radixx, said it noticed “unusual activity” around its reservations program on Tuesday. It did not describe the malware or say how it got into the program.

Australian software developer Click Studios on Saturday urged Passwordstate customers to reset all of their passwords if they downloaded a poisoned update using the software’s In-Place Upgrade functionality.

An update to the software powering some billion iPhones around the world kicks in Monday with an enhanced privacy feature critics fear will roil the internet advertising world.

Celebrated Hacker Dan Kaminsky Dead at 42

A recently observed malware botnet targeting Linux systems is employing many of the emerging techniques among cyber-criminals, such as the use of Tor proxies, legitimate DevOps tools, and the removal of competing malware, according to new research from anti-malware vendor Trend Micro.

Non-profit research and development organization MITRE on Friday announced that video conferencing giant Zoom has been named a CVE Numbering Authority (CNA).

The U.S. Department of Energy (DOE) this week kicked off a 100-day plan whose goal is to improve the cybersecurity of electric utilities — specifically their industrial control systems (ICS) — and secure the energy sector supply chain.

Following a wave of ransomware attacks, network-attached storage (NAS) appliance manufacturer QNAP Systems says it is urgently working on finding a solution to remove malware from infected NAS devices.

Perception Point, an Israeli startup focused on protecting against threats coming through collaboration tools, email and other cloud-based services, announced this week that it has raised $28 million in Series B funding, bringing the total amount raised by the company to $48 million.

Deep Instinct, a New York-based company that provides threat protection products powered by deep learning, on Thursday announced that it has raised $100 million in a Series D funding round.

The U.S. government's Cybersecurity and Infrastructure Security Agency (CISA) has raised an alarm for a new cyberattack in which both a Pulse Secure VPN appliance and the SolarWinds Orion platform were abused for malicious purposes.

As Security Operations Centers (SOCs) mature, they need to tackle some tough challenges with respect to data, systems and people

Anti-malware vendor Trend Micro is warning that attackers are attempting to exploit a previously patched vulnerability in its Apex One, Apex One as a Service, and OfficeScan product lines.