SecurityWeek

Industrial cybersecurity firm Claroty this week released a free and open source tool designed to help organizations check whether their operational technology (OT) devices are vulnerable to Urgent/11 attacks.

Recently disclosed vulnerabilities affecting enterprise virtual private network (VPN) products from Fortinet and Pulse Secure have been exploited in the wild, a researcher reported on Thursday.

Vietnam emerges as the country affected the most by Microsoft SQL Server attacks that leverage malicious jobs, a new report from Kaspersky reveals.

Vulnerabilities that Cisco Talos security researchers have discovered in various Aspose APIs could allow a remote attacker to execute code on affected machines.

A DLL hijacking vulnerability affecting Bitdefender Antivirus Free 2020 could have been exploited for privilege escalation and other malicious purposes, SafeBreach researchers revealed on Wednesday.

San Francisco, CA-based privileged access management (PAM) solution provider Remediant has closed a $15 million Series A funding round co-led by Dell Technologies Capital and ForgePoint Capital. The money will be used to expand Remediant's marketing and field operations, product engineering, channel and customer success programs, following quintupled sales revenue between 2017 and 2018.

The cybercriminals behind the recent ransomware incident that impacted over 20 local governments in Texas are apparently demanding $2.5 million in exchange for access to encrypted data.

The Linux Foundation this week announced an industry-wide effort aimed at accelerating the adoption of confidential computing.

Cisco informed customers on Wednesday that it has released patches for 17 critical and high-severity vulnerabilities affecting some of its Unified Computing products.

Planning and Preparation Are Key to Successfully Adopting FIDO Standards for “Simpler, Stronger Authentication”

Amazon, Microsoft and Intel are among leading tech companies putting the world at risk through killer robot development, according to a report that surveyed major players from the sector about their stance on lethal autonomous weapons.

A Russian-speaking threat group has managed to steal roughly $3.5 million since September 2018 by increasing the frequency of attacks, Singapore-based cybersecurity firm Group-IB reveals.

Visa this week announced a new set of capabilities aimed at improving fraud prevention and cybersecurity of payment systems.The new payment security services are meant to detect and disrupt fraud threats targeting financial institutions and merchants, and are available to Visa clients at no additional cost or sign-up.

Chinese cyberspies continue targeting medical research organizations in the U.S. and elsewhere, and cancer-related research appears to be of particular interest, FireEye said in a report published on Wednesday.

Lawyers for a transgender woman charged in a massive data breach at Capital One asked a judge Tuesday to release her from federal custody, saying that for her to remain jailed with men is a serious threat to her mental health.

A Ruby software package that contained a malicious backdoor has been removed from the Ruby Gems repository after compromising over ten libraries.Called rest-client, the gem was designed to help Ruby developers send REST requests to their web apps and is highly popular, with over 113 million downloads on rubygems.org.

Apple, Google and Mozilla announced on Wednesday that they have taken action against Kazakhstan’s efforts to spy on its citizens by requiring them to install a root certificate on their devices.

All Sphinx servers that are exposed to the Internet are prone to abuse by cybercriminals, as they can be accessed by anyone, CERT-Bund warns.

Launching denial-of-service (DoS) attacks against Tor’s most commonly used default bridges and flooding them would cost attackers around $17,000 per month, researchers have discovered. 

Bucharest could exclude Chinese giant Huawei from its future 5G network, according to a joint statement signed by the Romanian and US presidents and published on Wednesday.