Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Noteworthy stories that might have slipped under the radar: Capital One hacker’s sentence reversed, Google patches critical Chrome vulnerability, the story of an Expat flaw. 

The Cloak ransomware group has claimed responsibility for a February cyberattack on Virginia Attorney General’s Office.

Join the virtual event as we explore of the critical nature of software and vendor supply chain security issues.

Cato Networks discovers a new LLM jailbreak technique that relies on creating a fictional world to bypass a model’s security controls.

The FishMonger APT group, a subdivision of Chinese cybersecurity firm I-Soon, compromised seven organizations in a 2022 campaign.

Industry professionals comment on Google acquiring cloud security giant Wiz for $32 billion in cash.

The Hellcat ransomware group claims to have stolen tens of gigabytes of data from Ascom and Jaguar Land Rover.

Former NFL and University of Michigan assistant football coach Matt Weiss hacked into the computer accounts of thousands of college athletes seeking intimate photos and videos.

More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.

Analysis reveals a 140% increase in browser phishing, including a 130% increase in zero-hour phishing attacks.

Real-time event and risk detection firm Dataminr has raised $85 million from NightDragon and HSBC to accelerate AI development.

People on the Move

Life360 has appointed Vari Bindra, former Amazon cybersecurity lead, as Chief Information Security Officer.

Forcepoint has appointed Guy Shamilov as CISO, Bakshi Kohli as CTO and Naveen Palavalli as CPO and CMO.

Paul Calatayud has been named CISO of developer security posture management firm Archipelo.

Cyber readiness and response firm Sygnia has appointed Avi Golan as its new CEO.

Cybersecurity firm Absolute Security announced Harold Rivas as its new CISO.

More People On The Move
GitHub supply chain attack GitHub supply chain attack

More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.

WhatsApp Exploits WhatsApp Exploits

Attacks involving Paragon’s Graphite spyware involved a WhatsApp zero-day that could be exploited without any user interaction.

Google acquires Wiz Google acquires Wiz

News analysis: Google positions itself to compete with Microsoft for enterprise security dollars. How does this deal affect startup ecosystem?

Top Cybersecurity Headlines

A long-running campaign phishing for credentials through scareware recently switched to targeting macOS users.

Google has confirmed reports that it’s buying cloud security giant Wiz and says it’s prepared to pay $32 billion in cash.

A year-old vulnerability in a third-party ChatGPT tool is being exploited against financial entities and US government organizations.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.

Register

This webinar will guide you in aligning your security testing strategy with the right tools, helping you move beyond identifying weaknesses to effectively validating your overall security posture.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [August 19-20, 2025]

Learn More

SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place August 19-20 at the Ritz-Carlton, Half Moon Bay, CA

Learn More

This event delves into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Learn More

Supply Chain Security Summit
Join us as we explore the critical nature of software and vendor supply chain security issues with a focus on understanding how attacks against identity infrastructure come with major cascading effects. (March 19, 2025)

Learn More

Vulnerabilities

Cybercrime

In a recent investigation, it was discovered that cybercriminals are creating 57,000 new “fake” websites each week looking to imitate and exploit approximately 375 high-profile brands. eBay and Western Union were the most targeted brands, making up 44 percent of exploited brands discovered. Visa, Amazon, Bank of America and PayPal also heavily targeted by cybercriminals.Banks comprise the majority of fake websites by far with 65 percent of the total. Online stores and auction sites came in at 27 percent, with...

Secure electronic payment solutions provider VeriFone Systems, Inc. (NYSE: PAY), announced Wednesday that had acquired Semtek, an endpoint encryption solution company. The transaction is an all stock transaction in which Semtek shareholders will receive VeriFone common shares valuing the company at $18 million.

Cybercrime - Staring into the Eye of the BeastI have a problem. Actually, we all have a problem. You see, our life is gooood. Digitally, at least. We’re on the technology speed train, addicted, going full throttle without any desire to slow down. On the contrary, we strive to shift gears to quicken technology’s advancement. We can’t see our lives differently now and we’re expecting things to just get better. But here’s the problem – the bad-guys know this too.

The Norton Cybercrime Report: The Human Impact - Report Gauges Emotional Impact of Cybercrime, Shows 65% of Internet Users a Victim of CybercrimeCybercrime is real, it’s big, and it’s affecting a huge portion of the global Internet population.

Pareto Networks announced Daniel "Dan" Ryan, former executive vice president and general manager of McAfee's (MFE) network security business unit, will serve as CEO of the Cloud-based networking company.

Integration with QualysGuard Allows Sourcefire to Adapt Protection to Known Vulnerabilities on a Customer’s Network Sourcefire and Qualys today announced a product collaboration in which Sourcefire’s IPS (Intrusion Prevention System) will integrate with Qualys’ QualysGuard Vulnerability Management solution.

Snoop Dogg’s partnership with Symantec isn’t off to a great start. Just two days after announcing the “Hack is Wack” rap competition, the HackIsWack.com Web site was attacked. At the time of publishing, the site seems to be offline, likely to protect users from a reported cross site scripting attack discovered on Friday.

HP has won the heated bidding war for storage company 3Par, but Dell will take home $72 million from a break-up fee upon the termination of its merger agreement.Dell announced today that it will not increase its most recent proposal to acquire 3PAR, and that Dell has ended its discussions regarding a potential acquisition.

Heartland Payment Systems quietly issued a press release late Wednesday afternoon, announcing a settlement agreement with Discover Financial Services related to a 2008 data breach.Heartland will pay Discover $5 million as part of the settlement and the case is officially closed.On January 20, 2009 Heartland announced that a security breach had occurred in 2008, involving malicious software that compromised data within Heartland's network.

Verizon and VMware to Launch Enterprise-Class Hybrid Cloud Solution Verizon Business and VMware have announced a new enterprise-class hybrid cloud solution which the two claim will enable enterprises with vCloud-based infrastructure to move their applications to the cloud using existing IT configurations and applications, with no compromise in security or performance.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

Google has integrated OSV-SCALIBR features into OSV-Scanner, its free vulnerability scanner for open source developers.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.