Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Russian-speaking threat actors are caught abusing a GitHub profile to distribute information stealers posing as legitimate software.

Intel has published 41 new May 2024 Patch Tuesday advisories covering a total of more than 90 vulnerabilities. 

The Spanish bank Santander said customers in Chile, Spain and Uruguay are affected by a data breach at a third-party provider.

The Ebury Linux botnet has ensnared over 400,000 Linux systems in 15 years, with roughly 100,000 still infected.

Singing River Health System says the personal information of roughly 900,000 individuals was stolen in an August 2023 ransomware attack.

Apple and Google have rolled out a new mobile feature that warns users of unwanted trackers moving with them.

The group recommends that Congress draft emergency spending legislation to boost U.S. investments in artificial intelligence, including new R&D and testing standards to understand the technology’s potential harms.

Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in their products. 

Vermont legislature passed a bill that prohibits the sale of sensitive data, such as social security and drivers’ license numbers, financial or health information.

Patch Tuesday: Microsoft documents 60 security flaws in multiple software products and flags an actively exploited Windows zero-day for urgent attention.

Adobe documents multiple code execution flaws in a wide range of products, including the widely deployed Adobe Acrobat and Reader software.

People on the Move

PR and marketing firm FleishmanHillard named Scott Radcliffe as the agency’s global director of cybersecurity.

Portnox, a provider of zero trust access control solutions, announced that Joseph Rodriguez has joined the company as Chief Revenue Officer.

Cybersecurity awareness training firm NINJIO has appointed Jon Dion as its Chief Revenue Officer.

IAM firm Device Authority has announced the appointment of Richard Seward as its VP of Product Management.

Cohesity has hired former DoD Chief Digital and Artificial Intelligence Officer (CDAO) Dr. Craig Martell as Chief Technology Officer.

More People On The Move
zero-day flaw zero-day flaw

Patch Tuesday: Microsoft documents 60 security flaws in multiple software products and flags an actively exploited Windows zero-day for urgent attention.

Zscaler Zscaler

Zscaler has completed its investigation into the recent hacking claims and found that only an isolated test environment was compromised.

Weakening liberal democracies and weakening the NATO alliance are conjoined in the hybrid war that Russia is conducting against Ukraine. Weakening liberal democracies and weakening the NATO alliance are conjoined in the hybrid war that Russia is conducting against Ukraine.

Weakening liberal democracies and weakening the NATO alliance are conjoined in the hybrid war that Russia is conducting against Ukraine.

Top Cybersecurity Headlines

Russian-speaking threat actors are caught abusing a GitHub profile to distribute information stealers posing as legitimate software.

Intel has published 41 new May 2024 Patch Tuesday advisories covering a total of more than 90 vulnerabilities. 

The Spanish bank Santander said customers in Chile, Spain and Uruguay are affected by a data breach at a third-party provider.

The Ebury Linux botnet has ensnared over 400,000 Linux systems in 15 years, with roughly 100,000 still infected.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [June 25-26, Ritz-Carlton, Half Moon Bay, CA]

Learn More

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Learn More

Designed for senior level cybersecurity leaders to discuss, share and learn innovative information security and risk management strategies, SecurityWeek’s CISO Forum, will take place June 25-26 at the Ritz-Carlton, Half Moon Bay, CA

Learn More

SecurityWeek’s Threat Detection and Incident Response (TDIR) Summit dives into Threat hunting tools and frameworks, and explores the value of threat intelligence data in the defender’s security stack.

Learn More

Vulnerabilities

Cybercrime

Adobe Systems recently released an open source tool to help security pros in the fight against malware.According to the company, the Adobe Malware Classifier is a command-line tool aimed to help antivirus analysts, IT administrators and security researchers determine if a binary file contains malware so they can develop malware detection signatures faster. The tool uses machine-learning algorithms to categorize Win32 binaries – exe and DLL files – into three classes: 0, representing clean; 1, representing malicious; and unknown.

Pastebin.com has become a popular place for stolen data as well as boasts from hackers associated with Anonymous and other groups. The site’s status as a home for hackers may soon be in jeopardy however.In an interview with BBC, Pastebin owner Jeroen Vader stated that the site is looking to hire additional people to monitor the website’s content.

RIM Launches BlackBerry Mobile FusionIn November 2011, BlackBerry maker Research In Motion (RIM) announced that it would enter the multi-platform Mobile Device Management (MDM) market with the introduction of BlackBerry Mobile Fusion, the company’s next-generation enterprise mobility solution.

Network security firm Check Point made a big mistake this week, forgetting to renew the company’s primary domain name, CheckPoint.Com. When attempting to visit the company’s Web site at 6:55AM ET on Tuesday, my Web browser directed to a splash page for domain registrar Network Solutions. (see screenshot)

Dell is on a mission to be the one stop shop for IT needs within enterprise and SMB operations, by purchasing several companies and signing various strategic partnerships during the first quarter of 2012. So perhaps Dell has made a wise move with its plans to acquire Wyse Technology, a company known for thin clients and virtual desktops. 

BeyondTrust, a provider of Privileged Identity Management (PIM) solutions, this week announced the release of PowerBroker Sever Enterprise, a solution that enables access management for Linux and UNIX systems through Microsoft’s Active Directory.

A new variant of the Flashback malware has been spotted targeting Mac OS X systems left vulnerable to a recently patched Java flaw. If exploited, the malware could drop additional malicious payloads, or modify targeted websites in order to bombard a user with annoying ads – which earn money for the attackers.

ManTech International announced today that it has completed the acquisition of security firm HBGary, Inc.The HBGary brand will remain, a ManTech spokesperson told SecurityWeek, and will become part of a new commercial business unit within ManTech’s Mission, Cyber, & Intelligence Solutions (MCIS) group, led by Senior Vice President of Cyber Strategy, Ken Silva.Financial terms of the deal were not disclosed, though ManTech said that it used available cash to finance the acquisition.

I saw a movie a while back in which a character was locked up in a prison, and he said something like, “I’m not locked in here with you; you’re locked in here with me.” We have been told for years that the insider threat is more important to address than the external threat. Part of the issue is that when we think about an external attack, we have someone on whom we can focus our energy – the wily...

Late last week, the California Department of Child Support Services disclosed that storage devices containing child support customers’ sensitive personal information had been lost.The Department said that on March 12, 2012, it was notified by California’s Office of Technology Services (OTech) that data storage devices being shipped from IBM to Iron Mountain via FedEx had been lost.

Following disclosure late Friday afternoon of an incident involving unauthorized access to its processing system, Global Payments Inc., a provider of payment processing services, late Sunday night said that it believes the breach was confined to North America and less than 1.5 million card numbers were exported and in the hands of attackers.

Payment Processor Global Payments Confirms Security BreachEarly Friday morning, reports surfaced that VISA and MasterCard had started to notify banks regarding a potential security breach at a U.S.-based credit card processor.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

Adobe is providing incentives for bug bounty hackers to report security flaws in its implementation of Content Credentials and Adobe Firefly.

Cloud Security

Cloud Security

Cloud security giant Wiz has raised $1 billion, which brings the total funding to $1.9 billion, at a valuation of $12 billion.