SecurityWeek

Russia’s APT29 hacking group is expanding targets to political parties in Germany using a new backdoor variant tracked as Wineloader.

The resolution, sponsored by the United States and co-sponsored by 123 countries, including China, was adopted by consensus with a bang of the gavel and without a vote, meaning it has the support of all 193 U.N. member nations.

The Rhysida ransomware group has taken credit for the cyberattack on MarineMax and is offering to sell stolen data for 15 bitcoin.

There are several attributes that tie the cybersecurity community together–namely our collective passion for solving complex problems in order to reduce harm – but one has stood out prominently over the years: impostor syndrome.

Noteworthy stories that might have slipped under the radar: Google’s post-quantum cryptography threat model, keyboard typing sounds can expose data, DHS publishes AI roadmap.

Over 39,000 websites have been infected with the Sign1 malware that redirects visitors to scam domains.

CISA, the FBI, and MS-ISAC have released new guidance on how federal agencies can defend against DDoS attacks.

BlueFlag Security emerges from stealth mode with $11.5 million in a seed funding round led by Maverick Ventures and Ten Eleven Ventures.

Vulnerability in Dormakaba’s Saflok electronic locks allow hackers to forge keycards and open millions of doors.

Researchers detail GoFetch, a new side-channel attack impacting Apple CPUs that could allow an attacker to obtain secret keys.

Exploits targeting Tesla cars, operating systems, and popular software earned participants over $1.1 million at Pwn2Own Vancouver 2024.

Key provisions in the legislation would require AI developers to identify content created using their products with digital watermarks or metadata.

Praefortis is a new company pushing ethical and transparent recovery of lost or forgotten crypto wallet passwords.

Two Bear Capital leads a venture capital bet on Dymium, a California startup building data protection technologies.

H.R. 7520 prohibits data brokers from selling Americans’ data to foreign adversary countries or entities controlled by them.