Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Microsoft says roughly 8.5 million Windows devices were impacted by the faulty software update from CrowdStrike, and published a tool to help admins through the recovery process.

CrowdStrike on Saturday provided technical information and remediation guidance to help organizations impacted by the faulty software update that trigged massive IT outages across the globe on Friday.  

CrowdStrike says a routine sensor configuration update pushed to Windows OS triggered a logic error that blue-screened computers worldwide.

Judge dismissed SEC lawsuit charging SolarWinds and CISO Timothy Brown with hiding security problems before and after the SUNBURST supply chain compromise.

SonicWall warns that a simple GET request is enough to exploit a recent Splunk Enterprise vulnerability.

Over a dozen tech and cloud companies have created a new coalition for advancing security measures for AI.

Noteworthy stories that might have slipped under the radar: threats and risks to 2024 Summer Olympics, cybersecurity funding soars, Cellebrite hacked Trump shooter’s phone. 

The personal and health information of 12.9 million was stolen in a ransomware attack at Australian digital prescription services provider MediSecure.

SolarWinds has released patches for 13 vulnerabilities in Access Rights Manager, including eight critical bugs.

Organizations worldwide are reporting major outages due to Windows system crashes caused by a bad CrowdStrike update.

The Pwn2Own hacking competition is moving to Ireland and $300,000 is being offered for a zero-click exploit against WhatsApp. 

People on the Move

SaaS security company AppOmni has hired Joel Wallenstrom as its General Manager.

FTI Consulting has appointed Brett Callow as Managing Director in its Cybersecurity & Data Privacy Communications practice.

Mobile security firm Zimperium has welcomed David Natker as its VP of Global Partners and Alliances.

CISA has appointed Jeff Greene as Executive Assistant Director for Cybersecurity and Trent Frazier as Assistant Director for Stakeholder Engagement.

David Chétrit has been appointed the CEO of Kudelski Security.

More People On The Move
CrowdStrike IT Recovery Tool CrowdStrike IT Recovery Tool

Microsoft says roughly 8.5 million Windows devices were impacted by the faulty software update from CrowdStrike, and published a tool to help admins through the recovery process.

CrowdStrike Remediation Information CrowdStrike Remediation Information

CrowdStrike on Saturday provided technical information and remediation guidance to help organizations impacted by the faulty software update that trigged massive IT outages across the globe on Friday.  

CrowdStrike Remediation Information CrowdStrike Remediation Information

CrowdStrike says a routine sensor configuration update pushed to Windows OS triggered a logic error that blue-screened computers worldwide.

Top Cybersecurity Headlines

Organizations worldwide are reporting major outages due to Windows system crashes caused by a bad CrowdStrike update.

Teixeira, who was part of the 102nd Intelligence Wing at Otis Air National Guard Base in Massachusetts, worked as a cyber transport systems specialist.

Researchers show how the Port Shadow technique against VPNs can allow MitM attacks, enabling threat actors to intercept and redirect traffic. 

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Learn how to utilize tools, controls, and design models needed to properly secure cloud environments.

Register

The leading industrial cybersecurity conference for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [June 25-26, Ritz-Carlton, Half Moon Bay, CA]

Learn More

SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place June 25-26 at the Ritz-Carlton, Half Moon Bay, CA

Learn More

SecurityWeek’s annual cloud security virtual summit returns with a deliberate focus on exposed attack surfaces and weaknesses in public cloud infrastructure and APIs.

Learn More

SecurityWeek’s Identity & Zero Trust Strategies Summit is laser focused on helping organizations to level up their Identity and Zero Trust security strategies.

Learn More

Vulnerabilities

Cybercrime

HP has won the heated bidding war for storage company 3Par, but Dell will take home $72 million from a break-up fee upon the termination of its merger agreement.Dell announced today that it will not increase its most recent proposal to acquire 3PAR, and that Dell has ended its discussions regarding a potential acquisition.

Heartland Payment Systems quietly issued a press release late Wednesday afternoon, announcing a settlement agreement with Discover Financial Services related to a 2008 data breach.Heartland will pay Discover $5 million as part of the settlement and the case is officially closed.On January 20, 2009 Heartland announced that a security breach had occurred in 2008, involving malicious software that compromised data within Heartland's network.

Verizon and VMware to Launch Enterprise-Class Hybrid Cloud Solution Verizon Business and VMware have announced a new enterprise-class hybrid cloud solution which the two claim will enable enterprises with vCloud-based infrastructure to move their applications to the cloud using existing IT configurations and applications, with no compromise in security or performance.

Fortinet released its August 2010 Threat Landscape report showing some interesting changes and shifts from previous months, with an interesting trend in “Do-It-Yourself” Botnet Kits gaining momentum and becoming a serious threat.

QualysGuard PCI 5.0 - New Dashboard and Interactive Workflows to Support New Approved Scanning Vendor Requirements Qualys upgraded its PCI compliance suite today with the release of QualysGuard PCI 5.0. The upgraded solution provides customers a simplified way to meet the latest Payment Card Industry Data Security Standard (PCI DSS) compliance requirements.

Snoop Dogg and Norton Announce 'Hack is Wack' Video Contest To Raise Cybercrime Awareness Think you can bust out some silly fresh rhymes on the subjects of hacking, identity theft and computer viruses?

Wyse Technology today announced an expanded strategy involving thin and zero client computing, desktop virtualization, unified communications, and mobile access to virtual environments. Wyse will work with key partners including Citrix, IBM, Microsoft, VMware and others, along with its resellers, to deploy what the company characterizes as “a broader set of options for government, business and education.”

HP Launches CloudStart to Fast Track Customers to Private Clouds HP wants to take customers on a flight to the private cloud – and get them there quickly. HP says that with its HP CloudStart solution, it can deploy an open and flexible private cloud environment within 30 days.

.LNK Exploits - Shortcuts to InsecurityThe vulnerability in Windows Shell’s parsing of .LNK (shortcut) files presents some interesting and novel features in terms of its media lifecycle as well as its evolution from zero-day to patched vulnerability. For most of us, the vulnerability first came to light in the context of Win32/Stuxnet, malware that in itself presents some notable quirks.

Fake TweetDeck Updates Being Spread via Hacked Twitter AccountsCybercriminals are using hacked/compromised Twitter accounts to spread malicious links pointing to a fake update to TweetDeck, a popular client used to access Twitter.Some of the messages (tweets) that users may see include ones such as:• Hurry up for tweetdeck update!• Update TweetDeck! Bank Holiday• Critical tweetdeck update Bank Holiday• Sorry for offtopic, but it is a critical TweetDeck update. It won't work tomorrow!

Enterprise Data Loss Continues at Alarming RateA plethora of social media tools, increasing adoption of mobile devices being used for business, and the economic downturn are posing serious challenges for organizations looking to keep confidential company and customer data within company walls.Email leads the way as the number one method confidential company information is leaked in large enterprises, while social media tools and mobile devices are becoming a major threat, according to a recent study.

NETGEAR today announced the introduction of a new Unified Threat Management appliance that integrates with Microsoft Active Directory to provide single sign-on. While focused on businesses with fewer than 100 employees, the new appliance, dubbed the ProSecure® UTM50, has been optimized for larger businesses and built with scalability in mind.

CA Technologies Acquires Arcot Systems for $200 Million in CashThe security space is hot folks! The acquisitions of security related companies continues this morning with CA Technologies announcing that it has signed a definitive agreement to acquire Arcot Systems, Inc., a provider of authentication and fraud prevention solutions. CA will pay $200 million in cash for the privately-held company.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

CISA says a SILENTSHIELD red team assessment found gaping holes in the security posture of a federal civilian executive branch organization.

Cloud Security

Cloud Security

Join us as we explore the latest trends in the world of SaaS security, cyberattacks against cloud infrastructure, data security posture management (DSPM), and...