Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

The Treasury Department announced sanctions in connection with a massive Chinese hack of American telecommunications companies and a breach of its own computer network.

TikTok said it will have to “go dark” this weekend unless Biden assures the company it won’t enforce a shutdown after the Supreme Court upheld the ban.

CISA and other agencies call to action for the US government to take steps to close the software understanding gap.

Noteworthy stories that might have slipped under the radar: several multi-million dollar settlements, CrowdStrike-themed phishing emails, and MITRE launches D3FEND 1.0.

Law firm Wolf Haldenstein Adler Freeman & Herz LLP says more than 3.4 million people were impacted by a December 2023 data breach.

Google releases OSV-SCALIBR, an open source library for software composition analysis and file system scanning.

The US Treasury has sanctioned two individuals and four entities involved in the North Korean fake IT worker scheme.

Industry professionals comment on the Biden administration’s new executive order on cybersecurity. 

Three vulnerabilities in SimpleHelp could allow attackers to compromise the remote access software’s server and the client machine.

Cisco has unveiled AI Defense, a solution designed to help organizations protect development and use of AI applications. 

Microsoft researchers catches Russia’s Star Blizzard hackers spear-phishing with QR codes and WhatsApp group chats.

People on the Move

Karl Triebes has joined Ivanti as Chief Product Officer.

Steven Hernandez has joined USAID as CISO and Deputy CIO.

Data security and privacy firm Protegrity has named Michael Howard as its CEO.

Anand Ramanathan has been appointed as Chief Product Officer at Deepwatch.

Managed security platform provider Deepwatch has appointed Sammie Walker as CMO.

More People On The Move
US sanctions Chinese company for hacking US sanctions Chinese company for hacking

The Treasury Department announced sanctions in connection with a massive Chinese hack of American telecommunications companies and a breach of its own computer network.

Healthcare data breach Healthcare data breach

In 2024 organizations informed the US government about 585 healthcare data breaches affecting a total of nearly 180 million user records.

CISA CISA

Jen Easterly hopes CISA is allowed to continue its election-related work under new leadership despite “contentiousness” around that part of its mission.

Top Cybersecurity Headlines

Fortinet patches critical vulnerabilities, including a zero-day that has been exploited in the wild since at least November 2024. 

Patch Tuesday: Microsoft’s January Patch Tuesday rollout includes fixes for 160 security defects, the largest number of CVEs addressed in any single month since at least 2017.

Attackers are exploiting a critical vulnerability in Aviatrix Controller to execute arbitrary code in AWS cloud environments.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Explore trends and technologies that will shape the future of cybersecurity. Discover strategies for vendor selection, integration to minimize redundancies, and maximizing ROI from your cybersecurity investments. Gain actionable insights to ensure your stack is ready for tomorrow’s challenges.

Register

Dive into critical topics such as incident response, threat intelligence, and attack surface management. Learn how to align cyber resilience plans with business objectives to reduce potential impacts and secure your organization in an ever-evolving threat landscape.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [June 2025, Stay Tuned]

Learn More

SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place June 25-26 at the Ritz-Carlton, Half Moon Bay, CA

Learn More

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.(February 26, 2025)

Learn More

Supply Chain Security Summit
Join us as we explore the critical nature of software and vendor supply chain security issues with a focus on understanding how attacks against identity infrastructure come with major cascading effects. (March 19, 2025)

Learn More

Vulnerabilities

Cybercrime

As more and more digital technology is introduced into automobiles, the threat of malicious software and hardware manipulation increases. ISec Partners’ researchers got a lot of attention at Black Hat this year when they demonstrated how to start a car’s engine via text message. As it turns out, that was just the latest of several examples of how attackers can turn the electrical systems in your car into their own personal lock pick.

GlobalSign, one of the longest established Certification Authorities (CA) today said it would temporarily cease issuance of all digital certificates following a claim that the same hacker responsible for the recent DigiNotar hack had access to four other Certificate Authorities, and named GlobalSign as one of them.The company posted the following announcement on the incident on Tuesday afternoon:

Veracode today shared a newly created infographic that summarizes the techniques News of the World reporters used to pull off nefarious schemes including bribery, cracking insecure passwords, caller ID spoofing and social engineering.The infographic, titled, “News of the Scandal: The Story That Destroyed a 168 Year Old Newspaper” provides a detailed timeline with pivotal events, key players and technology-enabled privacy breaches that destroyed the 168 year old publication.

A former vice president in Citigroup's treasury finance department, pleaded guilty today to bank fraud arising from his embezzlement of more than $22 million from Citigroup. The defendant, Gary Foster, entered his plea before a United States District Judge at a Federal Courthouse in Brooklyn.

Imperva, a soon to go public provider of data security solutions, today launched a cloud-based service designed to help businesses defend against Distributed Denial of Service (DDoS) attacks.

The gap between vulnerability and protection is a distance that can be measured both by the amount of time that sensitive database information goes un-patched and by the extent of damage caused by a potential data breach. While organizations understand the stakes involved in leaving their systems un-patched, quite often they do not install patches in a timely manner. Is there a convenient and reliable way to bridge this gap?

In response to a series of cyber attacks that resulted in the personal information of more than 100 Million customers falling into the hands of hackers, Sony today announced that it has hired Philip R. Reitinger, a former U.S. Homeland Security official in charge of cyber security, as Senior Vice President and Chief Information Security Officer.

According to VeriSign, more than five million domain names were added to the Internet in the second quarter of 2011, bringing the total number of registered domain names to more than 215 million worldwide across all domains.The increase of 5.2 million domain names marks a growth rate of 2.5 percent over the first quarter.

All Your Base Are Belong To UsOnce upon a time (many many years ago), I was staying with a French family, and they asked me what I ate for breakfast. For the life of me, I could not remember how to say “honey” in French. I ended up saying “the stuff made by bees”, and they eventually got the point, “Ah, oui, miel!” So, we reached an understanding by talking about what we knew. Well, at least kind of an...

A number of servers belonging to kernel.org were compromised last month in an attack that may have started with a stolen user credential.According to a statement on kernel.org, which hosts the source code for the Linux kernel, the attack is not believed to have affected the source code repositories. While the situation remains under investigation, it is believed the attackers gained access to a server known as ‘Hera.’

A New Landscape in Security Technology: Applying Big Data for Intelligent Decision MakingOver the past few years we’ve seen a dramatic shift in the threat environment. Whether the threats come from hackers, script kiddies, client-side attacks, advanced persistent threats, or state-sponsored actors, the attacks are targeted, unexpected and deadly. The perpetrators are organized, well-financed and relentlessly innovative. They are motivated by money and will use any means possible to cash in.

Mocana, a San Francisco based company that focuses on mobile and smart device security solutions, announced today that it has received a strategic investment from Intel Capital, the global investment arm of chip giant Intel.

VMware and Samsung announced a partnership this week to deliver virtual desktops to mobile devices, enabling a new class of “dual persona” devices that could provide seamless and secure use of employee-owned IT devices for accessing both work and personal data.At the VMworld 2011 conference, the companies said they would collaborate by integrating both the VMware View desktop virtualization platform, and VMware Horizon Mobile with Samsung mobile devices, including its Galaxy S II and Galaxy Tab devices.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

CISA and other agencies call to action for the US government to take steps to close the software understanding gap.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.