Qlik Sense vulnerabilities CVE-2023-41266, CVE-2023-41265 and CVE-2023-48365 exploited for initial access in Cactus ransomware attacks.
Okta expands scope of October breach, saying hackers stole names and email addresses of all its customer support system users.
The latest Chrome security update addresses the seventh exploited zero-day vulnerability documented in the browser in 2023.
Cybersecurity predictions for 2024 to help security professionals in prioritizing efforts to navigate the ever-changing threat landscape.
When too much subjectivity is mixed into risk assessment, it can produce a risk picture that is not an accurate representation of reality.
It’s crucial to thoroughly assess the risk profiles of various SSE platforms and weigh their suitability against their organization’s risk tolerance before adopting SSE.
To share or not to share threat intelligence isn’t the question. It’s how to share, what to share, where and with whom.
By embracing a strategy that combines technological advancements with critical thinking skills, collaboration, and a culture of continuous learning, organizations can safeguard against AI’s disruptive effects.
CISOs and risk management leaders must understand clearly the role of cyber insurance in a robust security program, ongoing changes to premiums and policy pricing, the errors that could deny coverage and how it all fits into global incident response planning.
SecurityWeek’s inaugural Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
Designed for senior level cybersecurity leaders to discuss, share and learn innovative information security and risk management strategies, SecurityWeek’s CISO Forum, will take place in 2023 as a virtual event. (June 13-14, 2023)
As CISOs and corporate defenders grapple with the intricacies of securing sensitive data passing through multi-cloud deployments and APIs, the importance of frameworks, tools, controls and design models have surfaced to the front burner. (July 19, 2023)
-
The latest Chrome security update addresses the seventh exploited zero-day vulnerability documented in the browser in 2023.
-
Threat actors have started exploiting a critical ownCloud vulnerability leading to sensitive information disclosure.
-
Three critical vulnerabilities in ownCloud could lead to sensitive information disclosure and authentication and validation bypass.
-
Microsoft invites researchers to new bug bounty program focused on vulnerabilities in its Defender products.
-
US Treasury sanctions Sinbad, saying the cryptocurrency mixer is laundering funds for North Korean hacking group Lazarus.
-
Amir Golshan of Los Angeles was sentenced to 96 months in prison for perpetrating multiple cybercrime schemes.
-
Hacktivism is evolving. It is important for both the law and cyber defenders to understand the current and potential activity of hacktivism to better…
-
Cybercriminals hacked into the Kansas court system, stole sensitive data and threatened to post it on the dark web in a ransomware attack that…
