Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Noteworthy stories that might have slipped under the radar: European Parliament application breached, DocGo hacked, VMware advisories moved to Broadcom portal. 

A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024.

The Ohio Lottery cyberattack conducted by the DragonForce ransomware group has impacted more than 500,000 individuals.

Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco.

Accenture Federal Services wins $789 million U.S. Navy SHARKCAGE cybersecurity contract.

Tech giant notifies millions of customers that full names and physical mailing addresses were stolen during a security incident.

When not scamming other criminals, criminals are concentrating on the use of mainstream AI products rather than developing their own AI systems.

The LockBit cybercrime group has taken credit for the recent ransomware attack that disrupted City of Wichita systems.

CISA’s Vulnrichment project is adding important information to CVE records to help improve vulnerability management processes.

BetterHelp customers have started receiving refund notices from a $7.8 million data privacy settlement, the FTC says.

F5 has patched two potentially serious vulnerabilities in BIG-IP Next that could allow an attacker to take full control of a device.

People on the Move

Ex-NSA chief Paul Nakasone has been appointed founding director of the Institute for National Defense and Global Security at Vanderbilt University.

Garo Doudian has joined NextGen Healthcare as Chief Information and Security Officer (CIO/CISO).

Denmark-based cybersecurity solutions firm Heimdal announced the appointment of Jesper Frederiksen as its new CEO.

Healthcare cybersecurity firm Blackwell Security has named Geyer Jones as its first CEO.

Searchlight Cyber has appointed Tim Warner as VP of Global Enterprise Sales.

More People On The Move
Chrome security updates Chrome security updates

A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024.

Zscaler Zscaler

Zscaler says its customer, production and corporate environments are not impacted after a notorious hacker offers to sell access.

Lockbit ransomware Lockbit ransomware

Charges and sanctions announced against Dimitry Yuryevich Khoroshev, the alleged developer and operator of LockBit ransomware.

Top Cybersecurity Headlines

Noteworthy stories that might have slipped under the radar: European Parliament application breached, DocGo hacked, VMware advisories moved to Broadcom portal. 

A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024.

The Ohio Lottery cyberattack conducted by the DragonForce ransomware group has impacted more than 500,000 individuals.

Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [June 25-26, Ritz-Carlton, Half Moon Bay, CA]

Learn More

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Learn More

Designed for senior level cybersecurity leaders to discuss, share and learn innovative information security and risk management strategies, SecurityWeek’s CISO Forum, will take place June 25-26 at the Ritz-Carlton, Half Moon Bay, CA

Learn More

SecurityWeek’s Threat Detection and Incident Response (TDIR) Summit dives into Threat hunting tools and frameworks, and explores the value of threat intelligence data in the defender’s security stack.

Learn More

Vulnerabilities

Cybercrime

Microsoft has released the advanced notification for its upcoming Patch Tuesday security update release, in which the company will be issuing 14 security bulletins that cover 34 vulnerabilities found in Windows, Office and Silverlight software.The upcoming Patch Tuesday release is one of the biggest patch releases made by Microsoft for a long time. However, the company denied it to be its largest ever.

IntraLinks IPO - Cloud Security Provider Goes Public on New York Stock Exchange, Raises $143 MillionIntraLinks Holdings (NYSE:IL), a provider of cloud-based solutions that help enterprises securely manage content, exchange business information and collaborate within and among organizations, went public today (its third attempt) and started trading on the New York Stock Exchange.

Data security vendor Imperva and data masking solutions provider ActiveBase, are partnering to offer a comprehensive protection solution for sensitive data.The partnership, announced this week, will allow joint customers to protect sensitive data from those who don't need to see it. The solution, for example, will allow personal data to be shielded from IT personnel such as outsourced support teams and protect personal information in training and development environments.

Securing the Extended EnterpriseAs corporations expand their reliance on the Internet and technology to conduct business, most work diligently to reduce their exposure to attack. Their efforts are focused primarily on protecting their enterprise assets, but could they be missing a very important aspect of their attack surface…. the extended enterprise?

Signature Based Anti-Virus Test Results - Vendors Struggle to Keep up with ThreatsThe most popular signature-based antivirus (AV) solutions detect on average less than 19% of malware threats, according to a new report released today by IT security vendor Cyveillance. However, that detection rate increases to 61.7% after 30 days, although even this rate could hardly be seen as comforting.

Security solutions provider Rapid7 has launched the latest version of its vulnerability management solution, NeXpose, which will help local governments and private enterprises adhere to Federal Information Processing Standard (FIPS) 140-2 Certification requirements.

Jailbroken iPhones - a Risk in the EnterpriseLast week’s ruling by the Library of Congress's Copyright Office giving a legal green light to iPhone and iPad users who want to download non-Apple-approved apps may make corporate security managers nervous if these Apple products are part of their mobile device portfolio – but a smartphone security company has come up with a counter-measure that will at least bring the risk level down to what it was before the ruling.

Solace Systems and Layer 7 Technologies Team Up on Scalable Messaging for SOA and Cloud EnvironmentsSolace Systems and Layer 7 Technologies have announced a joint venture in which the companies will integrate their technologies to offer scalable and secure SOA and cloud based solutions to their customers.

Information security technology vendor Perimeter E-Security has decided to expand its R&D initiatives by opening a new innovation center in Boston, MA. The company plans to expand the new research group for the next two years. Perimeter E-Security offers information security and compliance products to enterprise users including secure messaging services, firewall services and anti-virus and spam detection services.

Mumba Botnet Infects over 55,000 Computers around the worldAVG Technologies issued a report this week that identified a global network of 55,000 malware-infected computers infected by the Mumba botnet.AVG researchers discovered that the Mumba botnet, named after attributes indentified on the server, has stolen more than 60GB of data from users including credentials from social networking Web sites, banking account details, credit card numbers and emails.

MobileIron, a provider of multi-OS smartphone management solutions, today announced a $16 million Series C financing round. Just under a year ago the company raised $11 million in a Series B funding round.The new capital will be used to support business expansion and investment in innovation.Foundation Capital joined existing investors Norwest Venture Partners, Sequoia Capital, and Storm Ventures. The investment was led by Paul Holland, general partner with Foundation Capital.

Biometric Authentication for iPhone AppsPerSay, a provider of Voice Biometric solutions, today announced the availability of its VocalPassword functionality for iPhone, iPad, and iPod Touch applications. The new capability can replace existing login processes and use technology that relies on the biometric power of voice to verify identity.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

Adobe is providing incentives for bug bounty hackers to report security flaws in its implementation of Content Credentials and Adobe Firefly.

Cloud Security

Cloud Security

Cloud security giant Wiz has raised $1 billion, which brings the total funding to $1.9 billion, at a valuation of $12 billion.