SecurityWeek

SAP this week released its latest set of security patches, which brings a total of 23 Security Notes, including five that address Hot News vulnerabilities.

TPG Capital-backed Digital.ai launched on Wednesday with a new software development and security platform. The new company, based in Plano, Texas, is a combination of CollabNet VersionOne, XebiaLabs, and Arxan Technologies.

Threat actors working for North Korea have also been hired by others to hack websites and extort targets, the U.S. government says in a new cyber alert.

SafeBreach has raised a further $19 million to improve and expand its breach-and-attack simulation platform, which allows customers to assess their security posture against a continuous barrage of genuine, but safe, hacker behaviors.

Metasploit Team Unveils Community Powered Knowledge Base of Vulnerabilities and Insights

Five Ways to Steer Your Security Organization in a Toxic Environment

The recently disclosed attack aimed at two websites pertaining to the San Francisco International Airport (SFO) is the work of Russian hackers, ESET claims.

Awake Security, a California-based company that specializes in network traffic analysis, has raised $36 million in a Series C funding round.

Oracle this week released its April 2020 collection of security patches, which includes a total of 397 fixes for vulnerabilities affecting two dozen products.The software giant also revealed that 264 of the addressed vulnerabilities could be exploited remotely without authentication.

A report published this week by the U.S. Government Accountability Office (GAO) shows that the Pentagon’s cyber hygiene initiatives have not been completed and in some cases no one is keeping track of their progress.

Identity verification and authentication provider Onfido today announced the closing of a $100 million funding round that brings the total raised by the company to date to $200 million.

HackerOne announced on Tuesday that the bug bounty program of Chinese technology giant Tencent is now accessible through its platform.

Microsoft’s Update Tuesday patches for April 2020 address 113 vulnerabilities, including three Windows flaws that have been exploited in attacks for arbitrary code execution and privilege escalation.

Adobe has patched five vulnerabilities in its ColdFusion, After Effects and Digital Editions products, but none of the flaws appears too serious.

Advice for CISOs on Bridging the IT-OT Security Gap: Part 1

Google has decided to keep support for the File Transfer Protocol (FTP) in Chrome a bit longer, after initially saying it would completely remove it in Chrome 82.

A data set containing 3,954,416 Quidd user credentials was found on a prominent dark web hacking forum, Risk Based Security reports.Backed by Sequoia and headquartered in Brooklyn, Quidd offers an application for trading digital collectibles, and claims to have issued over 2.1 billion assets.

Siemens has released six new advisories for its April 2020 Patch Tuesday updates, including three that inform customers about the impact of the SegmentSmack vulnerability on some of the company’s industrial products.

OnePlus 7 Pro Vulnerability Highlights Trusted Execution Environment Issues 

With $30 Million in Funding, Silicon Valley Visionaries Jim Clark and Tom Jermoluk Aim to Replace Passwords With a Chain of Trust