SecurityWeek

Specialty networking solutions provider Belden on Tuesday disclosed a data breach resulting in the theft of employee and business information.

cPanel last week released patches to address three vulnerabilities in cPanel & WebHost Manager (WHM), including one leading to two-factor authentication bypass.

Israel-based cloud security company Lightspin announced on Tuesday that it has emerged from stealth mode with $4 million in seed funding.

Secure Access Service Edge (SASE) provider Cato Networks has raised $130 million in a Series E funding round led by Lightspeed Venture Partners with a new investor, Coatue, and existing investors, Greylock, Aspect Ventures / Acrew Capital, Singtel Innov8, and Shlomo Kramer. Cato is now valued at over $1 billion.

Organizations Must Assume That Bad Actors Are Already in Their Networks

A threat group tracked as Stantinko was observed using a new version of a Linux proxy Trojan that poses as Apache servers to remain undetected.

Home Depot has agreed to shell out  $17.5 million under a settlement with the attorney generals of 46 states and the District of Columbia over the massive data breach suffered by the home improvement retailer in 2014, when cybercriminals managed to steal email addresses and payment card data belonging to more than 40 million customers in the United States.

Apple's global security director has been charged with bribery for allegedly offering hundreds of iPads to Californian law enforcement officers in exchange for weapons permits for company employees.

Cybercriminals were able to change the DNS settings of some cryptocurrency websites after tricking GoDaddy employees into providing them with access to customer accounts.

A Chinese threat actor tracked as Mustang Panda was observed using an updated arsenal of tools in recent attacks, Proofpoint’s security researchers revealed on Monday.

Canonical, the publisher of the Ubuntu Linux distribution, announced on Tuesday that it has made available long-term support (LTS) container images on Docker Hub, promising up to 10 years of security maintenance.

By Thinking of IT, OT and IoT as Components of One Backbone, We Can Improve Resiliency

Telecom companies in Britain face hefty fines if they don’t comply with strict new security rules under a new law proposed in Parliament on Tuesday that is aimed at blocking high-risk equipment suppliers like China’s Huawei.

The Federal Bureau of Investigation (FBI) this week issued an alert to warn the public of spoofed FBI-related Internet domains.According to the agency, “unattributed cyber actors” are registering domains designed to spoof legitimate websites pertaining to the FBI, “indicating the potential for future operational activity.”

VMware on Monday published an advisory to inform users that it’s working on patching a critical command injection vulnerability affecting Workspace ONE Access and some related components.

Following a takedown attempt in October, the TrickBot malware has received various improvements that are designed to make it more resilient.

Google faces fresh regulatory scrutiny in Britain over plans to revamp its ad data system, after an industry lobbying group complained to the competition watchdog that the changes would cement the U.S. tech giant’s online dominance.

Microsoft last week released an out-of-band update for Windows to address authentication issues related to a recently patched Kerberos vulnerability.

Vulnerabilities Could Have Allowed Hackers to Change Passwords of TikTok Accounts 

Two Romanians suspected of running services for encrypting malware and testing it against antivirus engines were arrested last week.Allegedly the operators of the CyberSeal and Dataprotector crypting services, as well as of the Cyberscan service, the duo is said to have provided aid to more than 1,560 criminals.