SecurityWeek

China has more than 5,000 cybersecurity companies and all the top 20 firms are working with the government. 

UAT-9686 exploited the bug to deploy the AquaShell backdoor on Cisco appliances with certain ports open to the internet.

Easterly will be leading the world-renowned cybersecurity conference and other RSAC programs.

Security leaders chart course beyond predictions with focus on supply chain, governance, and team efficiency.

Researchers have disclosed technical details on a new AMD processor attack that allows remote code execution inside confidential VMs.

Vibe coding generates a curate’s egg program: good in parts, but the bad parts affect the whole program.

The startup will use the investment to accelerate R&D, expand go-to-market efforts, and hire new talent.

isVerified provides Android and iOS mobile applications designed to protect enterprise communications. 

The attack bypassed Copilot’s data leak protections and allowed for session exfiltration even after the Copilot chat was closed.

Hackers stole patients’ personal, treatment, and health insurance information from the organization’s IT systems.

Designed for long-term access, the framework targets cloud and container environments with loaders, implants, and rootkits.

Only a dozen new advisories have been published this Patch Tuesday by industrial giants. 

Hackers stole the personal and reservation information of people with a Eurail pass and those who made a seat reservation with the company.

The developer security company has raised a total of more than $84 million in funding.

A judge has ruled that the plaintiffs failed to demonstrate intent to defraud investors. 

RedVDS enables threat actors to set up servers that can be used for phishing, BEC attacks, account takeover, and fraud.

The Predator spyware is more sophisticated and dangerous than previously realized.

Novee provides continuous AI-driven penetration testing to uncover and address novel vulnerabilities.

The company will use the fresh investment to accelerate its global go-to-market and product expansion.

A threat actor breached Betterment’s systems, accessed customer information, and sent scam crypto-related messages.