SecurityWeek

Endpoint security firm SentinelOne announced on Wednesday that it has raised $120 million through a Series D funding round led by Insight Partners.

The U.S. National Security Agency (NSA) on Tuesday urged Windows users and administrators to immediately address the vulnerability tracked as BlueKeep and CVE-2019-0708.

An Inside Look at the Evolution of a West African Cybercriminal Startup Turned BEC Enterprise

One day after medical testing firm Quest Diagnostics revealed that nearly 12 million of its patients had their personal and financial information exposed as a result of a breach at the American Medical Collection Agency (AMCA), LabCorp has come forward to say that the incident has also impacted 7.7 million of its customers.

The alleged source code of another tool used by Iran-linked cyber-espionage group OilRig was recently posted online.

A recently patched vulnerability in the NVIDIA GeForce Experience (GFE) could be exploited for the execution of arbitrary commands on affected systems, Rhino Security Labs reveals.

The Network Level Authentication (NLA) feature of Windows Remote Desktop Services (RDS) can allow a hacker to bypass the lockscreen on remote sessions, and there is no patch from Microsoft, the CERT Coordination Center at Carnegie Mellon University warned on Tuesday.

Russia's leading internet company said Tuesday that it's committed to data privacy as it responded to reports that the national intelligence agency is pressuring it into handing over encryption keys.

Cybersecurity solutions provider Kaspersky on Tuesday announced that the company has a new name, a new logo and a new mission statement.

Cybersecurity solutions firm Imperva announced on Tuesday that it has agreed to acquire Distil Networks, an Arlington, Virginia-based provider of bot detection and mitigation solutions for an undisclosed sum. 

Australian police on Tuesday raided the home of a prominent journalist who reported on a secret government plan to spy on Australian citizens.

An easy-to-exploit local privilege escalation vulnerability has been found and patched in Rapid7’s InsightIDR intruder analytics solution, a researcher revealed on Monday.

As a threat researcher, I’ve advised security teams of organizations big and small, across both public and private sectors. So after a decade in DFIR, people often ask me about the craziest or most interesting things I’ve seen on client networks. I have quite a few interesting stories under my belt, from state and local governments, to start ups, and large enterprises. I’m excited to share a few of these ‘Tales from the SOC’ with the larger cybersecurity community.

Apple announced on Monday at its 2019 Worldwide Developers Conference (WWDC) a new authentication system that should provide better privacy protections compared to similar products from Facebook and Google.

A top Australian university with close ties to the country's government and security services on Tuesday said it had been the victim of a vast hack by a "sophisticated operator" who gained access to 19 years of sensitive data.

As organizations become more and more digitally connected, concerns about secure access seem to loom larger than ever. With more users connecting to more resources, how can organizations ensure people requesting access are who they say they are? 

The Open Technology Institute (OTI) has responded to GCHQ/NCSC's article on 'Principles for a More Informed Exceptional Access Debate' with an 'Open Letter to GCHQ on the Threats Posed by the Ghost Proposal'.

A data breach at billing collections service provider American Medical Collection Agency (AMCA) could impact many of the company’s customers. One victim is medical testing firm Quest Diagnostics and roughly 12 million of its patients.

The authors of the GandCrab ransomware have reportedly announced on underground forums that they are closing their operation after claiming that they have earned over $150 million a year.