Application Security
Researchers discovered and published details of an XSS attack that could potentially impact millions of websites around the world.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
M&A Tracker
178 cybersecurity M&A deals were announced in the first half of 2024, the smallest half year number since SecurityWeek started tracking them.
Vulnerabilities
Threat actors have started exploiting critical-severity vulnerabilities in ServiceNow shortly after public disclosure.
Malware & Threats
A fresh Mandiant report documents North Korea's APT45 as a distinct hacking team conducting cyberespionage and ransomware operations.
Vulnerabilities
Nvidia has patched high-severity vulnerabilities in its Jetson, Mellanox OS, OnyX, Skyway, and MetroX products.
Disaster Recovery
CrowdStrike has shared a preliminary incident review, explaining why the update that caused global chaos was not caught by testing.
Artificial Intelligence
KnowBe4 chief executive Stu Sjouwerman: “We sent them their Mac workstation, and the moment it was received, it immediately started to load malware."
ICS/OT
The FrostyGoop ICS malware was used recently in an attack against a Ukrainian energy firm that resulted in loss of heating for many buildings.
Endpoint Security
Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool
Microsoft says roughly 8.5 million Windows devices were impacted by the faulty software update from CrowdStrike, and published a tool to help admins through...
Incident Response
CrowdStrike on Saturday provided technical information and remediation guidance to help organizations impacted by the faulty software update that trigged massive IT outages across...
Disaster Recovery
CrowdStrike says a routine sensor configuration update pushed to Windows OS triggered a logic error that blue-screened computers worldwide.
Incident Response
Organizations worldwide are reporting major outages due to Windows system crashes caused by a bad CrowdStrike update.
Tracking & Law Enforcement
Teixeira, who was part of the 102nd Intelligence Wing at Otis Air National Guard Base in Massachusetts, worked as a cyber transport systems specialist.
Privacy
Researchers show how the Port Shadow technique against VPNs can allow MitM attacks, enabling threat actors to intercept and redirect traffic.
Data Breaches
Pharmacy chain Rite Aid says 2.2 million people are impacted by a recent data breach for which the RansomHub group has taken credit.
Government
Kaspersky is shutting down operations in the US and laying off employees following the recent Commerce Department ban.
Data Breaches
The massive AT&T breach has been linked to an American hacker living in Turkey and reports say the telecom giant paid a $370,000 ransom.
Cloud Security
Google's parent company Alphabet is reportedly in advanced talks to acquire the hotshot Israeli data security startup.
Data Breaches
Data breach exposed records of call and text interactions for nearly all AT&T’s wireless customers and has been linked to the recent attacks targeting...
Artificial Intelligence
Few people understand AI, nor how to use nor control it, nor where it is going. Yet politicians wish to regulate it.
Artificial Intelligence
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
Artificial Intelligence
Vulnerabilities
Vulnerabilities
The flaws could lead to remote code execution, authentication bypasses, and path traversal attacks.
Artificial Intelligence
Artificial Intelligence
Vulnerabilities
Application Security
