Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Ferrari said that a ransomware attack was responsible for a data breach that exposed customer details, but did not impact company operations.

Maryland startup Aembit gets funding to build an identity platform designed to manage, enforce, and audit access between federated workloads.

Cryptocurrency ATM maker General Bytes discloses a security incident resulting in the theft of millions of dollars’ worth of crypto-coins.

Waterfall Security Solutions and TXOne Networks have each announced launching new OT security appliances.

Hitachi Energy has blamed a data breach affecting employees on the recent exploitation of a zero-day vulnerability in Fortra’s GoAnywhere solution.

NBA is notifying individuals that their information was stolen in a data breach at a third-party mailing services provider.

Cybercriminals are abusing the Adobe Acrobat Sign service in a campaign distributing the RedLine information stealer malware.

Conor Brian Fitzpatrick of New York was arrested and charged last week for allegedly running the popular cybercrime forum BreachForums.

Huawei has replaced thousands of product components banned by the US with homegrown versions, its founder has said.

Latitude Financial Services says the personal information of 300,000 customers was stolen in a cyberattack.

Three US government agencies have issued a joint warning to organizations about LockBit 3.0 ransomware attacks.

The recently identified Trigona ransomware has been highly active, targeting tens of organizations globally.

Ferrari ransomware attack and data breach Ferrari ransomware attack and data breach

Ferrari said that a ransomware attack was responsible for a data breach that exposed customer details, but did not impact company operations.

Pompompurin arrested Pompompurin arrested

Conor Brian Fitzpatrick of New York was arrested and charged last week for allegedly running the popular cybercrime forum BreachForums.

Huawei Huawei

Huawei has replaced thousands of product components banned by the US with homegrown versions, its founder has said.

Top Cybersecurity Headlines

Ferrari said that a ransomware attack was responsible for a data breach that exposed customer details, but did not impact company operations.

Maryland startup Aembit gets funding to build an identity platform designed to manage, enforce, and audit access between federated workloads.

Cryptocurrency ATM maker General Bytes discloses a security incident resulting in the theft of millions of dollars’ worth of crypto-coins.

Waterfall Security Solutions and TXOne Networks have each announced launching new OT security appliances.

SecurityWeek Industry Experts

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents. (Sponsored by: Immersive Labs)

Register

Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems. (Sponsored by: Saviynt)

Register

Upcoming Virtual Events

Attack Surface Management Summit

As network defenders adopt Attack Surface Management tools to continuously monitor for signs of weaknesses, this event will share best practices and actionable information to reduce risk from exposed attack surfaces.

Learn More
Ransomware Resilience & Recovery Summit

This event will separate hype from reality. SecurityWeek’s Ransomware Resilience and Recovery Summit will help cybersecurity teams to plan, prepare, and recover from ransomware incidents that continue to impose major costs businesses.

Learn More
Supply Chain Security Summit

The surge in software supply chain attacks has sent defenders scrambling to find mitigations and solutions. This event will address the complex nature of the problem, best practices for mitigating security issues, and tools and frameworks available.

Learn More
Zero Trust Strategies Summit

Zero Trust is more than a marketing buzzword. In this event, security experts will decipher the confusing world of Zero Trust, and share war stories on securing organizations by eliminating implicit trust and continuously validating every stage of digital interaction.

Learn More

Vulnerabilities

Cybercrime

Ridge Global names former US-CERT Director and former Director of the National Cyber Security Division at the Department of Homeland Security to Board of AdvisorsRidge Global, the security and risk management services company founded by Tom Ridge, nation's first secretary of Homeland Security and former governor of Pennsylvania, today announced is has named Amit Yoran, CEO of Netwitness Corporation, to the company's board of advisors.

Company Announces New Solution for Cloud Risk Assessment, Monitoring and Assurance Target Compliance, Security and Threats in Private, Public and Hybrid Cloud Environments As Global 2000 private and large public sector organizations face increasing compliance and security demands, they are virtualizing more of their IT operations through private and public cloud environments. In this transition, organizations still need to "gracefully lose control" without undermining governance, risk management and compliance requirements.

Adobe today announced its new Acrobat X Family of products, which includes Adobe Reader X as well as Acrobat X Suite, Acrobat X Pro, and Acrobat X Standard. In the new release, Adobe is adding an entirely new security strategy by introducing a new “Protected Mode” in Acrobat Reader. Announced this past summer, Protected Mode utilizes "sandboxing" technology based on Microsoft’s “Practical Windows Sandboxing technique ” – a method of isolating the application from the rest of the operating system...

Vulnerability Could Allow Attacker to Execute Arbitrary Code or Cause a denial-of-service ConditionRIM has released a security advisory to address a security issue in the BlackBerry Attachment Service component of the BlackBerry Enterprise Server. According to RIM, the vulnerability could allow a malicious individual to cause buffer overflow errors, leading to a Denial of Service (DoS) condition or execution of arbitrary code on the computer that the BlackBerry Attachment Service runs on.

GE today announced the acquisition of Australia-based data migration and SCADA simulation specialists, Opal Software. Opal Software supplies professional engineering services and SCADA and DMS software products to electricity, water and gas utilities. The company’s data migration capabilities help clients to switch quickly between multiple platforms.

Organized crime enterprise known as the Mirzoyan-Terdjanian, fleeced the health care system through a wide-range of money making criminal fraud schemesThe FBI reported this week that seventy-three people, including a number of alleged members and associates of an Armenian-American organized crime enterprise, were charged in indictments with various health care fraud-related crimes involving more than $163 million in fraudulent billing.

As part of National Cyber Security Awareness Month, students from the Polytechnic Institute of New York University’s (NYU-Poly) Information Systems and Internet Security (ISIS) Lab are offering tips on how to keep information safe on you mobile device.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

GitHub this week made secret scanning generally available and free for all public repositories.

Cloud Security