Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Codenamed Eastwood, the operation targeted the so-called NoName057(16) group, which was identified as being behind a series of DDoS attacks on municipalities and organizations linked to a NATO summit.

Cyberattack disrupted UNFI’s operations in June; company estimates $50–$60 million net income hit but anticipates insurance will cover most losses.

A threat actor that may be financially motivated is targeting SonicWall devices with a backdoor and user-mode rootkit.

Virtual event brings together leading experts, practitioners, and innovators for a full day of insightful discussions and tactical guidance on evolving threats and real-world defense strategies in cloud security.

Compumedics has been targeted by the VanHelsing ransomware group, which stole files from the company’s systems.

iCOUNTER, which helps organizations defend against targeted attacks, has launched under the helm of former Mandiant president and COO John Watters.

Google refused to share any details on how its Big Sleep AI foiled efforts to exploit a SQLite vulnerability in the wild.

Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units.

Cameron John Wagenius pleaded guilty to charges related to hacking into US telecommunications companies.

Italian company Exein has raised €70 million (~$81 million) in a Series C funding round led by Balderton.

Google has released a Chrome 138 security update that patches a zero-day, the fifth resolved in the browser this year.

People on the Move

Robert Shaker II has joined application security firm ActiveState as Chief Product and Technology Officer.

MorganFranklin Cyber has promoted Nick Stallone and Ferdinand Hamada into newly created roles.

Jessica Newman has joined Sophos as General Manager of Global Cyber Insurance.

Breach and attack simulation solutions provider AttackIQ has appointed Pete Luban as Field Chief Information Security Officer.

Silobreaker announced the appointment of Geoff Brown as its new Chief Executive Officer.

More People On The Move
US National Guard hacked by China US National Guard hacked by China

Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units.

Belk ransomware attack Belk ransomware attack

DragonForce says it stole more than 150 gigabytes of data from US department store chain Belk in a May cyberattack.

Train hacking Train hacking

A vulnerability affecting systems named End-of-Train and Head-of-Train can be exploited by hackers to cause trains to brake. 

Top Cybersecurity Headlines

Louis Vuitton customers in the UK, South Korea, Turkey and possibly other countries are being notified of a data breach.

The latest release of the xAI LLM, Grok-4, has already fallen to a sophisticated jailbreak.

Since August 2015, Google has delivered a constant stream of monthly security patches for Android. Until July 2025.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

This online session will explore resilience planning in response to geopolitical tensions and help CISOs navigate the current state of federal cybersecurity initiatives.

Register

Join the summit to explore critical threats to public cloud infrastructure, APIs, and identity systems through discussions, case studies, and insights into emerging technologies like AI and LLMs.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [August 19-20, 2025 | Ritz-Carlton, Half Moon Bay]

Learn More

SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place August 19-20 at the Ritz-Carlton, Half Moon Bay, CA. (www.cisoforum.com)

Learn More

The Threat Detection & Incident Response Summit delves into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization. [May 21, 2025 – Virtual]

Learn More

SecurityWeek’s Cloud and Data Security Summit returns with a deliberate focus on exposed attack surfaces and weaknesses in public cloud infrastructure and APIs. [July 16, 2025 – Virtual]

Learn More

Vulnerabilities

Cybercrime

Cenzic and NT OBJECTives, both firms that focus on application security solutions, today announced that they have settled an ongoing legal battle that has been rolling for most of this year.

A new report coming from the Anti-Phishing Working Group (APWG) reveals that phishing attacks against Chinese banking and e-commerce Web sites soared by 44 percent in the first half of 2011. According to the report, 70 percent of all maliciously registered domain names in the world were established by Chinese cybercriminals for use against Chinese brands and enterprises.

Apple security guru Charlie Miller said he has uncovered a bug in Apple iOS that allows an attacker to circumvent Apple’s code signing approach.According to Miller, who is principal research consultant with Accuvant Labs and a veteran of the Apple bug-finding world, the vulnerability could spell trouble for iOS users if exploited.

Millions of people in Brazil have potentially been exposed to malware as a result of a nationwide DNS attack. Additionally, several organizations in Brazil are reporting that network devices are also under attack. After being compromised remotely, scores of routers and modems had their DNS settings altered to redirect traffic. Police have arrested a 27-year-old ISP employee who is suspected to have taken part in the attacks.

McAfee today announced a round of enhancements to its Cloud Security Platform, the company’s offering to help organizations take advantage of cloud computing in a secure fashion.The McAfee Cloud Security Platform is a content-aware solution that secures the primary channels of traffic including email, web and authentication – moving between an organization and the Cloud.

A compromised server at the Massachusetts Institute of Technology (MIT) has been identified as being used as a vulnerability scanner and attack tool, probing the Web for unprotected domains and injecting code. According to researchers at Bitdefender who discovered the attack, the ongoing attacks appear to be related to the Blackhole Exploit Pack, a popular crime kit used by criminals online.

Yammer, the high flying software company that lets companies create their own private Twitter-like networks, this week announced that it has hired Josha Bronson as director of securityBased in the company's headquarters in San Francisco, Bronson will be responsible for the overall security testing, compliance and governance issues.

I recently found two great security articles from 2000 from a well-respected Microsoft security guru, Scott Culp. Culp provided two sets of Immutable Laws of Security - one on the consumer side, and the other on the admin side.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

RevEng.ai has raised $4.15 million in seed funding for an AI platform that automatically detects malicious code and vulnerabilities in software.

Cloud Security

Cloud Security

Virtual event brings together leading experts, practitioners, and innovators for a full day of insightful discussions and tactical guidance on evolving threats and real-world...

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.