Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

North Korean cryptocurrency thieves abusing Zoom Remote collaboration feature to target cryptocurrency traders with malware.

San Francisco startup closes a hefty $75 million Series A funding round led by Khosla Ventures and Mayfield.

Kenzo Security has emerged from stealth mode after 18 months of developing its agentic AI security platform.

With 51% of internet traffic now bot-driven and a growing share of it malicious, organizations must prepare for an era of more evasive, AI-assisted automation.

Countries around the world are preparing for greater digital conflict as increasing global tensions and a looming trade war have raised the stakes.

Lantronix’s XPort device is affected by a critical vulnerability that can be used for takeover and disruption, including in the energy sector.

With unapproved AI tools entrenched in daily workflows, experts say it’s time to shift from monitoring to managing Shadow AI use across the enterprise.

Noteworthy stories that might have slipped under the radar: 4chan hacked, auto-reboot security feature coming to Android, Iranian administrator of Nemesis charged in US.

Data protection firm Cy4Data Labs has raised $10 million in a Series A funding round led by Pelion Venture Partners.

Legends International says the personal information of employees and customers was compromised as a result of a cyberattack.

Ahold Delhaize has confirmed that data was stolen from its systems in November 2024 after a ransomware group claimed the attack.

People on the Move

DARPA veteran Dan Kaufman has joined Badge as SVP, AI and Cybersecurity.

Kelly Shortridge has been promoted to VP of Security Products at Fastly.

After the passing of Amit Yoran, Tenable has appointed Steve Vintz and Mark Thurmond as co-CEOs.

Former Wiz executive Trish Cagliostro has joined Orchid Security as Chief Revenue Officer.

Transcend has named former UnitedHealth Group CISO Aimee Cardwell as CISO in Residence.

More People On The Move
Privacy of Social Media and Internet Apps Privacy of Social Media and Internet Apps

With unapproved AI tools entrenched in daily workflows, experts say it’s time to shift from monitoring to managing Shadow AI use across the enterprise.

Windows vulnerability exploited Windows vulnerability exploited

A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions.

SonicWall vulnerability exploited SonicWall vulnerability exploited

A SonicWall SMA 100 series vulnerability patched in 2021, which went unnoticed at the time of patching, is being exploited in the wild.

Top Cybersecurity Headlines

The vulnerabilities are described as code execution and mitigation bypass issues that affect Apple’s iOS, iPadOS and macOS platforms.

The US government’s cybersecurity agency CISA has “executed the option period on the contract” to keep the vulnerability catalog operational.

China accuses three alleged U.S. NSA operatives of cyberattacks targeting critical infrastructure and the Asian Games in Harbin.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.

Register

This webinar will guide you in aligning your security testing strategy with the right tools, helping you move beyond identifying weaknesses to effectively validating your overall security posture.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [August 19-20, 2025 | Ritz-Carlton, Half Moon Bay]

Learn More

SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place August 19-20 at the Ritz-Carlton, Half Moon Bay, CA. (www.cisoforum.com)

Learn More

The Threat Detection & Incident Response Summit delves into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization. [May 21, 2025 – Virtual]

Learn More

SecurityWeek’s Cloud and Data Security Summit returns with a deliberate focus on exposed attack surfaces and weaknesses in public cloud infrastructure and APIs. [July 16, 2025 – Virtual]

Learn More

Vulnerabilities

Cybercrime

Cybersecurity and hacking incidents have made a significant shift over the past two years from previously only being reported in technology-focused publications, to now often covered by mainstream media. While the Stuxnet worm is nothing new to information security professionals, CBS's “60 Minutes” will broadcast a segment on topic of Stuxnet this Sunday and bring the incident to the attention of milllions of Americans.

The Department of Justice announced on Friday that a Redmond, Oregon, man who provided products and services to help users steal Internet services, was convicted on Thursday of seven counts of wire fraud.According the Department of Justice, Ryan Harris, 26, owned and operated TCNISO, a company that distributed hardware and software tools that let users modify their cable modems in order to disguise themselves as legit customers and obtain Internet service without paying.

Report Shows Serious Weakness In NASA's Cyber Security Posture, Reveals Several Breaches and Security Incidents at the Space AgencyRecent testimony by NASA Inspector General Paul K. Martin before the Subcommittee on Investigations and Oversight, House Committee on Science, Space, and Technology, revealed that NASA faces serious challenges when it comes to protecting its information and systems from cyber attacks.

SAN FRANCISCO -- RSA CONFERENCE 2012 -- Qualys CEO Philippe Courtot is pushing a new initiative aimed at taking on security issues fundamental to the Internet.The effort will be led by the Trustworthy Internet Movement (TIM), a nonprofit created to take on issues such as SSL governance and the spread of botnets and malware. TIM is built around three core pillars:

SAN FRANCISCO – RSA CONFERENCE 2012 – Organizations with large and disparate IT systems are often challenged in dealing with vulnerability management initiatives and determining what order vulnerabilities should be addressed in order to more effectively improve their risk posture.

According to the results of a study released today by Websense, the Bring-Your-Own-Device phenomenon is growing, and with the trend, employees are often circumventing corporate security policies. The results showed that seventy-seven percent of the 4,000 people interviewed said that mobile devices are mission critical when it comes to getting work done, but within that same group 76-percent believe that their mission critical devices place the organization at risk.

SAN FRANCISCO -- RSA CONFERENCE 2012 -- Tufin Technologies, a company that offers solutions for automated security policy management and risk mitigation, released the results of a quick survey this week, after speaking to 100 network managers on the topic of recently announced updates to the EU’s Data Protection legislation.

SAN FRANCISCO – RSA CONFERENCE 2012 – EMC today announced the availability of five new security and risk management advisory services designed to help organizations improve levels of trust and control for next-generation IT infrastructures such as cloud, virtualization, and mobile.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

Lemonade says the incident is not material and that its operations were not compromised, nor was its customer data targeted.

Cloud Security

Cloud Security

The greatest security policies in the world are useless if enterprises don’t have a reasonable, consistent, and reliable way to implement them.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.