Identity & Access
Security vendor InkBridge Networks calls urgent attention to the discovery of a decades-old design flaw (CVE-2024-3596) in the popular RADIUS protocol.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Data Breaches
Seven nations are backing Australia in calling out a China-linked hacking group for compromising government networks.
Cyberwarfare
On the eve of NATO’s 75th anniversary summit in Washington DC, Mandiant outlines the current state of cyberthreats facing NATO and aligned countries.
Government
The Supreme Court's striking down of the Chevron Doctrine will have a major effect on the determination and enforcement of cyber regulation in the...
Artificial Intelligence
ChatGPT maker OpenAI was breached in 2023, but the company says source code and customer data were not accessed.
Cybercrime
OVHcloud says it mitigated the largest ever DDoS attack leveraging packet rate, which peaked at 840 Mpps.
Data Breaches
Twilio has confirmed a data breach after hackers leaked 33 million phone numbers associated with the Authy app.
Data Breaches
Fintech companies Wise and Affirm are impacted by the data breach at Evolve Bank, which has shared additional details on the recent ransomware attack.
Malware & Threats
Cisco has patched an NX-OS command injection zero-day exploited by China-linked cyberespionage group Velvet Ant.
Vulnerabilities
Millions of OpenSSH servers could be vulnerable to unauthenticated remote code execution due to a vulnerability tracked as regreSSHion and CVE-2024-6387.
Nation-State
TeamViewer has confirmed that the Russian cyberespionage group APT29 appears to be behind the recent hack.
Cyberwarfare
Shockwaves from the Russian government's hack of Microsoft's corporate infrastructure continue to spread as the victim pool widens.
CISO Strategy
Inside the Mind of a CISO 2024 is a survey of 209 security leaders to understand the thinking and operational methods and motivations of...
Ransomware
The LockBit ransomware group claimed to have hacked the US Federal Reserve, but leaked data from an Arkansas-based bank.
Supply Chain Security
More than 100,000 websites are affected by a supply chain attack injecting malware via a Polyfill domain.
Ransomware
Researcher shows how hackers could use social engineering to deliver ransomware and other malware to Meta’s Quest 3 VR headset.
Data Breaches
Neiman Marcus has disclosed a data breach impacting 64,000 people just as a hacker announced the sale of customer data.
Vulnerabilities
New attack named SnailLoad allows a remote attacker to infer websites and videos viewed by a user without direct access to network traffic.
Government
The US government announced a ban on the sale of Kaspersky software over fears that the company is controlled by the Russian government.
Cybercrime
Car dealership software provider CDK Global was in the process of restoring services impacted by a cyberattack when it discovered an additional hack.
Artificial Intelligence
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
Artificial Intelligence
Vulnerabilities
Vulnerabilities
The flaws could be exploited to execute arbitrary code, access sensitive information, and elevate privileges.
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
