Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Predictive attack intelligence and risk protection startup BforeAI has raised $15 million in a Series A funding round led by SYN Ventures.

Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.

A new phishing campaign abuses compromised email accounts and targets corporate users with PDF files hosted on Autodesk Drive.

The FTC is sending a total of $5.6 million in refunds to over 117,000 Ring customers as result of a 2023 settlement.

The Brocade SANnav management application is affected by multiple vulnerabilities, including a publicly available root password.

Zero trust endpoint security company ThreatLocker has announced a $115 million Series D funding round that brings the total to $240 million. 

IBM is acquiring HashiCorp for $6.4 billion for its infrastructure lifecycle management and security lifecycle management capabilities.

Pope Francis has called for an international treaty to ensure AI is developed and used ethically, devoting his annual peace message this year to the topic.

Cisco warns that nation state-backed hackers are exploiting at least two zero-day vulnerabilities in its ASA firewall platforms to plant malware on telecommunications and energy sector networks.

KnowBe4 boasts that the merger will create “the largest, advanced AI-driven cybersecurity platform for managing human risk.”

As a security industry, we need to focus our energies on those professionals among us who know how to walk the walk.

People on the Move

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

Shaun Khalfan has joined payments giant PayPal as SVP, CISO.

UK cybersecurity agency NCSC announced Richard Horne as its new CEO.

More People On The Move
Palo Alto Networks Palo Alto Networks

Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.

CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation

CISA warns organizations of a two-year-old Windows Print Spooler vulnerability being exploited in the wild.

Threat Intelligence Report Threat Intelligence Report

Mandiant’s M-Trends 2024 report shows that defenses are improving – and that may be true. But the reality remains that these same statistics demonstrate that if anything, the attackers still retain the upper hand.

Top Cybersecurity Headlines

Predictive attack intelligence and risk protection startup BforeAI has raised $15 million in a Series A funding round led by SYN Ventures.

Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.

A new phishing campaign abuses compromised email accounts and targets corporate users with PDF files hosted on Autodesk Drive.

The FTC is sending a total of $5.6 million in refunds to over 117,000 Ring customers as result of a 2023 settlement.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [June 25-26, Ritz-Carlton, Half Moon Bay, CA]

Learn More

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Learn More

Designed for senior level cybersecurity leaders to discuss, share and learn innovative information security and risk management strategies, SecurityWeek’s CISO Forum, will take place June 25-26 at the Ritz-Carlton, Half Moon Bay, CA

Learn More

SecurityWeek’s Threat Detection and Incident Response (TDIR) Summit dives into Threat hunting tools and frameworks, and explores the value of threat intelligence data in the defender’s security stack.

Learn More

Vulnerabilities

Cybercrime

In a packed, table filled room for about 300 people, Josh Corman and Jericho opened the SOURCE Boston conference on Tuesday with a keynote address on Anonymous. The stated goal of their talk was to examine what Anonymous could look like in 2020.

“ThreatCloud” Powers New Anti-Bot and Antivirus Software Blades, Bringing Security Intelligence and Protections to Security Gateways Network security firm Check Point Software Technologies, today announced the launch of a collaborative network designed to help its customers more effectively stop attacks and thwart cybercrime, as well as share attack information and threat trends.

Privacy advocates are pressing for an investigation into Google after a report by the Federal Communications Commission (FCC) failed to find evidence the search engine giant broke the law in collecting data through its Street View service.

Researchers at Symantec recently identified 29 malicious apps in the Google Play marketplace targeting Japanese Android users.All 29 of the apps have been taken down by Google, Symantec said, but not before a wave of installations that may number as high as 300,000.

AntiSec supporters, branding themselves the LulzKnights, targeted the Berrien County Sheriff's Department on Sunday. The St. Joseph, MI, law enforcement agency lost their internal emails and documents due to the incident, and they were published online. However, this breach could lead to more damage due to the number of hosted accounts that shared space with AntiSec’s victim.

Richard Perkett Joins Rapid7 to Lead Product DevelopmentBoston-based Rapid7, a provider of security risk intelligence solutions and best known for Metasploit, its penetration testing platform which the company acquired in 2009, announced that it has hired Richard Perkett as vice president of engineering.

It’s a done deal. TIBCO Software, a publicly traded (NASDAQ: TIBX) provider of infrastructure software solutions, today said that it has completed the acquisition of San Jose California-based LogLogic, a provider of and log management and security intelligence solutions.

Researchers at Trend Micro have uncovered a piece of ransomware targeting the master boot record to take control of a system.The move is a step beyond typical pieces of ransomware, which usually encrypt files or restricts user access to the infected system. In this case however, the malware copies the original MBR and overwrites it with its own malicious code.

Neustar, Inc., a provider of information, infrastructure and security solutions, today announced that it has hired Jonathan Coombes as Chief Information Security Officer.Coombes comes to Neustar from hosting firm Rackspace, where he served as Chief Security Officer and was responsible for the company’s global cybersecurity and risk management, physical security, and compliance strategies.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Cloud Security

Artificial Intelligence

Cisco announces Hypershield, an AI-native and cloud-native enterprise security solution with a wide range of capabilities.