Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Google says the hacking group behind the recent cyberattacks on UK retailers is now shifting focus to the US.

A summary of noteworthy stories that might have slipped under the radar this week.

The 15th edition of NATO’s Locked Shields cyber defense exercise brought together 4,000 experts from 41 countries.

Russia-linked APT28 has been exploiting mail server vulnerabilities against government and defense entities since September 2023.

The FBI says former federal and state government officials are targeted with texts and AI-generated voice messages impersonating senior US officials.

Pwn2Own participants have earned tens of thousands of dollars for Red Hat, Windows, Oracle VirtualBox, Docker Desktop, and AI exploits.

Once a key figure in the Angler exploit kit underworld, Tarasov’s life has unraveled into detention, paranoia, and an unwanted return to the Russia he publicly despised.

Coinbase said a group of rogue contractors were bribed to pull customer data from internal systems, leading to a $20 million ransom demand.

American steel giant Nucor on Wednesday disclosed a cybersecurity incident that bears the hallmarks of a ransomware attack.

Enterprise cybersecurity giant Proofpoint is buying Germany-based Microsoft 365 security solutions provider Hornetsecurity.

The China-linked hacking group Earth Ammit has launched multi-wave attacks in Taiwan and South Korea to disrupt the drone sector.

People on the Move

Shane Barney has been appointed CISO of password management and PAM solutions provider Keeper Security.

Edge Delta has appointed Joan Pepin as its Chief Information Security Officer.

Vats Srivatsan has been appointed interim CEO of WatchGuard after Prakash Panjwani stepped down.

Network security policy management firm FireMon has appointed Alex Bender as Chief Marketing Officer.

Jeffrey Engle has been named CEO of CYBERWELL, the cybersecurity division of WELL Health Technologies.

More People On The Move
NATO Locked Shields NATO Locked Shields

The 15th edition of NATO’s Locked Shields cyber defense exercise brought together 4,000 experts from 41 countries.

Pwn2Own Berlin 2025 Pwn2Own Berlin 2025

Pwn2Own participants have earned tens of thousands of dollars for Red Hat, Windows, Oracle VirtualBox, Docker Desktop, and AI exploits.

Nucor Cyberattack Nucor Cyberattack

American steel giant Nucor on Wednesday disclosed a cybersecurity incident that bears the hallmarks of a ransomware attack.

Top Cybersecurity Headlines

The China-linked hacking group Earth Ammit has launched multi-wave attacks in Taiwan and South Korea to disrupt the drone sector.

Google bundles multiple safeguards under a single Android toggle to protect high-risk users from advanced mobile malware implants.

Ivanti has released patches for two EPMM vulnerabilities that have been chained in the wild for remote code execution.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.

Register

Join this webinar for a fascinating discussion to understand why data in itself is not enough to make informed decisions for prioritization.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [August 19-20, 2025 | Ritz-Carlton, Half Moon Bay]

Learn More

SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place August 19-20 at the Ritz-Carlton, Half Moon Bay, CA. (www.cisoforum.com)

Learn More

The Threat Detection & Incident Response Summit delves into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization. [May 21, 2025 – Virtual]

Learn More

SecurityWeek’s Cloud and Data Security Summit returns with a deliberate focus on exposed attack surfaces and weaknesses in public cloud infrastructure and APIs. [July 16, 2025 – Virtual]

Learn More

Vulnerabilities

Cybercrime

Internet security firm Webroot, today announced that Jacques Erasmus has been appointed chief information security officer for the Broomfield, Colorado based company.As Webroot’s first CISO, Erasmus will oversee data security operations across the business, including development, implementation and compliance.

On Monday, Google launched "Good To Know", a privacy campaign aimed at giving people practical advise when it comes to staying safe online. The new effort covers a wide range of topics and done with the help of the Citizens Advice Bureau in the UK.

You've Been Hacked. What's Your Response Plan?It’s 3:10 a.m. and your home phone rings.The assistant security specialist in your global company is sorry to wake you but it couldn’t wait. You open your eyes and you already know: he has spotted what he is calling “highly” suspicious activity over the company network. Although they are working on the problem, the situation is expected to get worse. You get dressed and go to the office.

McAfee Releases Endpoint Security Built on DeepSAFE Technology Co-Developed by McAfee and IntelMcAfee today announced “McAfee Deep Defender” the company’s next generation endpoint security solution that brings enhanced detection capabilities allowing it to detect kernel-mode malware.

Details Emerge on "Duqu" a Possible Precursor to the Next StuxnetSymantec researchers shared details today on what they say could be the precursor to a future Stuxnet-like attack. Symantec said they were tipped off about the threat on October 13th by a research lab “with strong international connections.”The threat has been named "Duqu" [dyü-kyü], simply because it creates files with the file name prefix “~DQ”.

Mocana, a San Francisco based company that focuses on mobile and smart device security solutions, today announced a new software solution designed to help enterprises manage and secure mobile devices and apps on their networks.The new solution, “Mobile App Protection”, or MAP, complements existing mobile device management (MDM) solutions that may be in place, but goes beyond app sandboxes, SDKs, containers, and hypervisor technologies that other mobile solutions typically utilize.

On Tuesday, Rapid7 released a free version of its commercial offering to the Metasploit Framework. This new Community Edition, rests on top of the framework many security professionals have grown to love over the years, but includes the easy to use interface and some basic features from the Metasploit Pro line.

- Getting The Most From Your SIEM Solution -A typical SIEM deployment conversation may look something like this: Vendor: Ms Customer, now that you’ve purchased our shiny new SIEM, complete with new SIEM smell, what use cases would you like to implement?

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

Code quality and security firm CodeAnt has secured $2 million in seed funding and it has been valued at $20 million.

Cloud Security

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.