Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Ferrari said that a ransomware attack was responsible for a data breach that exposed customer details, but did not impact company operations.

Maryland startup Aembit gets funding to build an identity platform designed to manage, enforce, and audit access between federated workloads.

Cryptocurrency ATM maker General Bytes discloses a security incident resulting in the theft of millions of dollars’ worth of crypto-coins.

Waterfall Security Solutions and TXOne Networks have each announced launching new OT security appliances.

Hitachi Energy has blamed a data breach affecting employees on the recent exploitation of a zero-day vulnerability in Fortra’s GoAnywhere solution.

NBA is notifying individuals that their information was stolen in a data breach at a third-party mailing services provider.

Cybercriminals are abusing the Adobe Acrobat Sign service in a campaign distributing the RedLine information stealer malware.

Conor Brian Fitzpatrick of New York was arrested and charged last week for allegedly running the popular cybercrime forum BreachForums.

Huawei has replaced thousands of product components banned by the US with homegrown versions, its founder has said.

Latitude Financial Services says the personal information of 300,000 customers was stolen in a cyberattack.

Three US government agencies have issued a joint warning to organizations about LockBit 3.0 ransomware attacks.

The recently identified Trigona ransomware has been highly active, targeting tens of organizations globally.

Ferrari ransomware attack and data breach Ferrari ransomware attack and data breach

Ferrari said that a ransomware attack was responsible for a data breach that exposed customer details, but did not impact company operations.

Pompompurin arrested Pompompurin arrested

Conor Brian Fitzpatrick of New York was arrested and charged last week for allegedly running the popular cybercrime forum BreachForums.

Huawei Huawei

Huawei has replaced thousands of product components banned by the US with homegrown versions, its founder has said.

Top Cybersecurity Headlines

Ferrari said that a ransomware attack was responsible for a data breach that exposed customer details, but did not impact company operations.

Maryland startup Aembit gets funding to build an identity platform designed to manage, enforce, and audit access between federated workloads.

Cryptocurrency ATM maker General Bytes discloses a security incident resulting in the theft of millions of dollars’ worth of crypto-coins.

Waterfall Security Solutions and TXOne Networks have each announced launching new OT security appliances.

SecurityWeek Industry Experts

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents. (Sponsored by: Immersive Labs)

Register

Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems. (Sponsored by: Saviynt)

Register

Upcoming Virtual Events

Attack Surface Management Summit

As network defenders adopt Attack Surface Management tools to continuously monitor for signs of weaknesses, this event will share best practices and actionable information to reduce risk from exposed attack surfaces.

Learn More
Ransomware Resilience & Recovery Summit

This event will separate hype from reality. SecurityWeek’s Ransomware Resilience and Recovery Summit will help cybersecurity teams to plan, prepare, and recover from ransomware incidents that continue to impose major costs businesses.

Learn More
Supply Chain Security Summit

The surge in software supply chain attacks has sent defenders scrambling to find mitigations and solutions. This event will address the complex nature of the problem, best practices for mitigating security issues, and tools and frameworks available.

Learn More
Zero Trust Strategies Summit

Zero Trust is more than a marketing buzzword. In this event, security experts will decipher the confusing world of Zero Trust, and share war stories on securing organizations by eliminating implicit trust and continuously validating every stage of digital interaction.

Learn More

Vulnerabilities

Cybercrime

Afilias, a provider of Internet infrastructure services, today announced that it has enabled Domain Name System Security Extensions (DNSSEC) for five country code Top-Level-Domains (ccTLDs) in Latin America and the Caribbean region.The latest top level domains that have been enabled with DNSSEC support include: .AG (Antigua and Barbuda), .BZ (Belize), .HN (Honduras) .LC (St. Lucia), and .VC (Saint Vincent and the Grenadines). 

McAfee today announced the availability of its Enterprise Mobility Management platform, an enterprise mobility solution that helps enterprises support devices such as iPhone and other iOS devices as well as Android devices, offering data protection, security provisioning, compliance enforcement and monitoring, and enter

Updated 2:40PM - In the comments, some of you mentioned you wanted pointers. Since we are mainly a b2b focused site for security professionals, we originally didn't include pointers. We did add pointers to help those who asked.

LogLogic, a provider of SIEM and IT data management solutions, today announced the official release of its virtual SIEM solution. The product was released in a preview version back in June, but is now generally available.

Political Site Says Iran May Have Executed Nuclear Staffers over Stuxnet Rumors are circulating that Iran may have executed a number of scientists and technicians working at nuclear facilities in the country after accusing them of helping to spread the Stuxnet malware in its systems.

Oracle Critical Patch Update for October, 2010 to fix 81 VulnerabilitiesOracle issued a Pre-Release Announcement this week, providing advance information about the Oracle Critical Patch Update to be released on Tuesday, October 12, 2010.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

GitHub this week made secret scanning generally available and free for all public repositories.

Cloud Security