Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Linguistic Lumberjack (CVE-2024-4323) is a critical vulnerability in the Fluent Bit logging utility that can allow DoS, information disclosure and possibly RCE.

CyberArk agreed to acquire machine identity management Venafi from Thoma Bravo for $1.54 billion.

CISA executive assistant director for cybersecurity Eric Goldstein is leaving the agency after more than three years.

Health insurance firm WebTPA says the personal information of 2.4 million individuals was compromised in a data breach.

Roundup of the cybersecurity-related merger and acquisition (M&A) deals announced in the first half of May 2024.

These strategies can help cybersecurity startups navigate the current market dynamics, focusing on modern buyer behavior, updated KPIs, brand awareness, and effective sales and marketing alignment.

MediSecure says data related to prescriptions distributed until November 2023 was compromised in a ransomware attack.

The American Radio Relay League (ARRL) has been targeted in a cyberattack that resulted in disruption and possibly a data breach.

Jan Leike, who ran OpenAI’s “Super Alignment” team, believes there should be more focus on preparing for the next generation of AI models, including on things like safety.

Slack reveals it has been training AI/ML models on customer data, including messages, files and usage information. It’s opt-in by default.

Noteworthy stories that might have slipped under the radar: FBI is targeting Scattered Spider, Australia’s MediSecure hacked, new Wi-Fi attack.

People on the Move

CISA executive assistant director for cybersecurity Eric Goldstein is leaving the agency after more than three years.

OT zero trust access and control company Dispel has appointed Dean Macris as its CISO.

Cloud identity and security solutions firm Saviynt has hired former Gartner Analyst Henrique Teixeira as Senior Vice President of Strategy.

PR and marketing firm FleishmanHillard named Scott Radcliffe as the agency’s global director of cybersecurity.

Portnox, a provider of zero trust access control solutions, announced that Joseph Rodriguez has joined the company as Chief Revenue Officer.

More People On The Move
Slack data for AI Slack data for AI

Slack reveals it has been training AI/ML models on customer data, including messages, files and usage information. It’s opt-in by default.

Microsoft Quick Assist Tool Abused for Ransomware Delivery

The Black Basta group abuses remote connection tool Quick Assist in vishing attacks leading to ransomware deployment.

Palo Alto Networks partners with IBM on cybersecurity Palo Alto Networks partners with IBM on cybersecurity

Palo Alto Networks and IBM announced a significant partnership to jointly provide cybersecurity solutions.

Top Cybersecurity Headlines

Linguistic Lumberjack (CVE-2024-4323) is a critical vulnerability in the Fluent Bit logging utility that can allow DoS, information disclosure and possibly RCE.

CyberArk agreed to acquire machine identity management Venafi from Thoma Bravo for $1.54 billion.

CISA executive assistant director for cybersecurity Eric Goldstein is leaving the agency after more than three years.

Health insurance firm WebTPA says the personal information of 2.4 million individuals was compromised in a data breach.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [June 25-26, Ritz-Carlton, Half Moon Bay, CA]

Learn More

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Learn More

Designed for senior level cybersecurity leaders to discuss, share and learn innovative information security and risk management strategies, SecurityWeek’s CISO Forum, will take place June 25-26 at the Ritz-Carlton, Half Moon Bay, CA

Learn More

SecurityWeek’s Threat Detection and Incident Response (TDIR) Summit dives into Threat hunting tools and frameworks, and explores the value of threat intelligence data in the defender’s security stack.

Learn More

Vulnerabilities

Cybercrime

IT security and data protection firm Sophos announced that it has reached an agreement to sell a majority interest in the company to private equity group Apax Partners. The transaction will value the company at $830 million. Following the transaction, the founders of Sophos will retain a significant minority shareholding.

SecurityWeek staff has confirmed that portable storage, authentication, and trusted virtual computing solutions provider, IronKey, has raised $22 million in venture capital funding.

Managed information security services provider, SecureWorks, Inc., announced today the hire of Colonel Barry R. Hensley, former Director of the Army's Global Network Operations and Security Center. Hensley will be joining as Vice President of SecureWorks' Counter Threat Unit.

McAfee, Inc. (NYSE:MFE) today reported financial results for the first quarter ended March 31, 2010. McAfee generated $502.7 million in revenue, a first quarter record and marking their 17th consecutive quarter of double-digit, year-over-year revenue growth along with record operating cash flow. With the rapid growth, executives admit they continue to have finance and operations issues.

IT management software provider, CA (NASDAQ: CA), today announced the results of a European IT Security study revealing that organizations across several European countries are not utilizing Data Loss Prevention (DLP) technology.The survey revealed that 64% of organizations in the UK are not using Data Loss Prevention technology and other countries such as France (23%), Ireland (50%), and Italy (60%) report low utilization.

Symantec Corp. (Nasdaq: SYMC) today announced it would be making two key acquisitions, saying it has signed definitive agreements to acquire PGP Corporation and GuardianEdge Technologies, Inc., two privately-held leaders in the email and data encryption market. 

Hewlett-Packard Co. has agreed to acquire struggling smart phone maker Palm Inc. for over $1 billion in cash. The companies announced Wednesday they had agreed to the deal, which will see HP pay $5.70 for every Palm common share. With debt included, the deal values Palm at $1.2 billion. The transaction has been approved by the HP and Palm boards of directors.

Vice President of Technology and Innovation at Verizon, Peter Tippett, speaking at the Infosecurity Europe trade show in London this week, made an interesting prediction, stating "While we can never fully forecast the future, we certainly have a good glimpse into what security will be like 10 years from now, based on all the data we have amassed over the last several years for our Data Breach Investigations Reports. For starters, we know successful security breaches are leveling off, and...

Verizon and Novell have teamed up to provide “Secure Access Services from Verizon” – an on-demand identity and access management service providing enterprise clients more control and stronger security when accessing cloud based applications.The service, powered by Novell technology, will enable enterprise clients to outsource the infrastructure and expertise required to extend and manage user access to cloud-based resources while maintaining control over policies and governance.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

A critical vulnerability tracked as CVE-2024-34359 and dubbed Llama Drama can allow hackers to target AI product developers.

Cloud Security

Cloud Security

Linguistic Lumberjack (CVE-2024-4323) is a critical vulnerability in the Fluent Bit logging utility that can allow DoS, information disclosure and possibly RCE.