Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Both human and machine identities occupy a unique position: they are simultaneously the foundation of cybersecurity and its weakest link.

President Joe Biden issued an executive order aimed at strengthening the nation’s cybersecurity and making it easier to go after foreign adversaries or hacking groups.

Hackers have leaked 15,000 Fortinet firewall configurations, which were apparently obtained as a result of exploitation of CVE-2022–40684.

In 2024 organizations informed the US government about 585 healthcare data breaches affecting a total of nearly 180 million user records.

Jen Easterly hopes CISA is allowed to continue its election-related work under new leadership despite “contentiousness” around that part of its mission.

Law enforcement turns the PlugX malware’s own self-delete mechanism against it, nuking the China-linked trojan from thousands of US machines.

With DORA’s January 2025 compliance deadline approaching, financial institutions must embrace rigorous testing, tailored threat profiles, and continuous vigilance to safeguard against cyber threats.

Open source software (OSS) is a prime target for supply chain cyberattacks and protecting it remains a major challenge.

A vulnerability in Google’s OAuth implementation allows takeover of old employee accounts when domain ownership changes.

Google has released Chrome 132 with fixes for 16 vulnerabilities, including multiple high-severity security defects.

Nvidia, Zoom, and Zyxel have released patches for multiple high-severity vulnerabilities across their products.

People on the Move

Data security and privacy firm Protegrity has named Michael Howard as its CEO.

Anand Ramanathan has been appointed as Chief Product Officer at Deepwatch.

Managed security platform provider Deepwatch has appointed Sammie Walker as CMO.

Former Barclays CISO Oliver Newbury has joined ransomware protection firm Halcyon as a strategic advisor.

Stephanie Crowe has been appointed head of the Australian Cyber Security Centre (ACSC).

More People On The Move
Healthcare data breach Healthcare data breach

In 2024 organizations informed the US government about 585 healthcare data breaches affecting a total of nearly 180 million user records.

CISA CISA

Jen Easterly hopes CISA is allowed to continue its election-related work under new leadership despite “contentiousness” around that part of its mission.

Fortinet vulnerability exploited Fortinet vulnerability exploited

Fortinet patches critical vulnerabilities, including a zero-day that has been exploited in the wild since at least November 2024. 

Top Cybersecurity Headlines

Patch Tuesday: Microsoft’s January Patch Tuesday rollout includes fixes for 160 security defects, the largest number of CVEs addressed in any single month since at least 2017.

Attackers are exploiting a critical vulnerability in Aviatrix Controller to execute arbitrary code in AWS cloud environments.

Chinese cyberspies targeted offices dealing with foreign investments and sanctions in the recent US Treasury hack. 

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Explore trends and technologies that will shape the future of cybersecurity. Discover strategies for vendor selection, integration to minimize redundancies, and maximizing ROI from your cybersecurity investments. Gain actionable insights to ensure your stack is ready for tomorrow’s challenges.

Register

Dive into critical topics such as incident response, threat intelligence, and attack surface management. Learn how to align cyber resilience plans with business objectives to reduce potential impacts and secure your organization in an ever-evolving threat landscape.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [June 2025, Stay Tuned]

Learn More

SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place June 25-26 at the Ritz-Carlton, Half Moon Bay, CA

Learn More

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.(February 26, 2025)

Learn More

Supply Chain Security Summit
Join us as we explore the critical nature of software and vendor supply chain security issues with a focus on understanding how attacks against identity infrastructure come with major cascading effects. (March 19, 2025)

Learn More

Vulnerabilities

Cybercrime

State of the art teleconferencing equipment is a must for most organizations today but few have installed it correctly, according to researchers at Rapid 7. The security company reported on Monday that conference boardrooms around the world were vulnerable to hacking. H.D.

The domain of UFC.com and two owned by luxury designer firm Coach, were targeted this week for their continued support of the anti-piracy and anti-counterfeiting bills - SOPA and PIPA. In each case, the group calling itself UGNazi, hijacked the DNS used by the targeted domains, redirecting the visitors to a secondary location.

Good Technology, a provider of enterprise mobility management solutions, today released its latest device activations report for Q4 2011. With the company’s device management platform deployed in more than half of the Fortune 100, the report provides interesting insights into mobile device trends in the enterprise.The report details smartphone and tablet devices activated amongst its enterprise customers, but it’s important to note that it does not include data from Blackberry or Windows Phone 7 devices. Consider it an iOS vs....

FireHost, a Dallas, Texas-based cloud hosting provider that has made security the focus of its offerings, today announced the opening of two new European data centers located in London and Amsterdam.

Last December, train service and rail schedules were disrupted, according to a TSA memo, after intruders managed to access the network of a rail company in the Pacific Northwest. Initially, the incident was thought to be a targeted attack, but further investigation shows that wasn’t the case.

Microsoft is not just taking down botnets; it is taking them down and naming names.In an amended complaint filed Monday in U.S. District Court for the Eastern District of Virginia, Microsoft named Andrey N. Sabelnikov of St. Petersburg, Russia, as the alleged head of the notorious Kelihos botnet.

AlertEnterprise, a Freemont, California-based provider of security, risk, and compliance management software, today launched AlertEnterprise Compliance Express, a NERC Critical Infrastructure Protection (CIP) compliance solution designed for smaller organizations such as Cooperative and Municipal Utilities.

New Solution Helps Enterprises Discover, Understand and Block Malware Utilizing Big Data AnalyticsSourcefire today introduced a new malware protection and analysis solution designed to work alongside traditional endpoint security solutions and help discover malware threats that may have been missed by existing endpoint defenses.

New York State Electric & Gas (NYSEG) and Rochester Gas and Electric (RG&E) today disclosed that they have suffered from a data breach, including unauthorized access to customer records which include customer names, Social Security numbers, dates of birth and, in some cases, financial institution account numbers.

The European Commission stated that on January 25, it will propose several changes to the data protection and privacy rules put into place over 15-years ago. The changes, the commission said, focus on reinforcing individuals’ rights, strengthening the EU market, and ensuring a high level of data protection.The proposed changes will streamline the existing policies and rules currently used by the 27 countries that make up the European Union. While there is plenty of overlap in the EU, there are...

The U.S. Air Force says it knows what caused an RQ-170 drone to crash in Iran, but will not release specific details. What’s certain, Air Force Chief of Staff General Norton Schwartz told Reuters, is that Iran had nothing to do with it.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.