Vulnerabilities
Pwn2Own Ireland 2024 participants have earned half a million dollars on the first day for hacking NAS devices, cameras, speakers and printers.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
ICS/OT
Premier Industrial Cybersecurity Conference offers 80+ sessions and hands-on training to tackle critical infrastructure cyber threats.
Mobile & Wireless
A zero-day vulnerability in Samsung mobile processors has been abused as part of an exploit chain for arbitrary code execution.
Data Breaches
Cisco has confirmed that some files have been stolen from its DevHub environment after a hacker offered to sell information.
Supply Chain Security
A Pyongyang-aligned APT was caught exploiting a recent zero-day in Internet Explorer in a supply chain attack.
Cybercrime
The DoJ has announced charges against Anonymous Sudan members and the disruption of their DDoS attack service.
Vulnerabilities
CISA warns that a critical-severity hardcoded credentials vulnerability in SolarWinds Web Help Desk is exploited in attacks.
Cloud Security
Intel and AMD respond to new attack methods named TDXDown and CounterSEVeillance that can be used against TDX and SEV technology.
Vulnerabilities
The Iran-linked APT OilRig has intensified cyber operations against the United Arab Emirates and the broader Gulf region.
Data Breaches
Fidelity Investments is notifying 77,000 individuals that their personal information was compromised in a data breach.
Artificial Intelligence
OpenAI has disrupted 20 cyber and influence operations this year, including the activities of Iranian and Chinese state-sponsored hackers.
Endpoint Security
SecurityWeek talked to David Weston, VP enterprise and OS security at Microsoft, to discuss Windows kernel access and safe deployment practices.
Vulnerabilities
Mozilla has released a Firefox 131 update to resolve CVE-2024-9680, a code execution vulnerability exploited in the wild as a zero-day.
Network Security
Palo Alto warns that attackers can access usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Malware & Threats
Patch Tuesday: Redmond warns that attackers are rigging Microsoft Saved Console (MSC) files to execute remote code on targeted Windows systems.
Vulnerabilities
Google and Amnesty have seen evidence that a Qualcomm chipset vulnerability tracked as CVE-2024-43047 may be exploited in the wild.
ICS/OT
The largest U.S. water utility disconnects customer portal and suspends billing services following a cyberattack.
Malware & Threats
The perfctl malware has been targeting vulnerabilities and misconfigurations in millions of Linux systems, likely infecting thousands.
Nation-State
The China-linked group Salt Typhoon hacked AT&T and Verizon, possibly compromising wiretap systems, according to WSJ.
Management & Strategy
Inside the collapse of IronNet: Some say the firm collapsed, in part, because it engaged in questionable business practices, produced subpar offerings, and could...
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
