Malware & Threats
The Black Basta group abuses remote connection tool Quick Assist in vishing attacks leading to ransomware deployment.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Artificial Intelligence
Palo Alto Networks and IBM announced a significant partnership to jointly provide cybersecurity solutions.
Vulnerabilities
Intel has published 41 new May 2024 Patch Tuesday advisories covering a total of more than 90 vulnerabilities.
Malware & Threats
Patch Tuesday: Microsoft documents 60 security flaws in multiple software products and flags an actively exploited Windows zero-day for urgent attention.
Data Breaches
Zscaler has completed its investigation into the recent hacking claims and found that only an isolated test environment was compromised.
Cyberwarfare
Weakening liberal democracies and weakening the NATO alliance are conjoined in the hybrid war that Russia is conducting against Ukraine.
Vulnerabilities
The Chinese hacking contest Matrix Cup is offering big rewards for exploits targeting OSs, smartphones, enterprise software, browsers, and security products.
Vulnerabilities
A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024.
Cybercrime
Zscaler says its customer, production and corporate environments are not impacted after a notorious hacker offers to sell access.
Ransomware
Charges and sanctions announced against Dmitry Yuryevich Khoroshev, the alleged developer and operator of LockBit ransomware.
Management & Strategy
Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco.
Nation-State
MITRE has shared more details on the recent hack, including the new malware involved in the attack and a timeline of the attacker’s activities.
Nation-State
Iranian state-sponsored group APT42 is targeting NGOs, government, and intergovernmental organizations with two new backdoors.
CISO Strategy
Microsoft security chief Charlie Bell pledges significant reforms and a strategic shift to prioritize security above all other product features.
Email Security
The US government warns of a North Korean threat actor abusing weak email DMARC settings to hide spear-phishing attacks.
Data Breaches
Dropbox says hackers breached its Sign production environment and accessed customer email addresses and hashed passwords.
CISO Conversations
SecurityWeek interviews Geoff Belknap, CISO at LinkedIn, and Guy Rosen, CISO at Facebook parent company Meta.
Incident Response
UnitedHealth Group’s CEO Andrew Witty shares details on the damaging cyberattack in testimony before a US Congress committee set for May 1, 2024.
Vulnerabilities
A vulnerability (CVE-2024-27322) in the R programming language implementation can be exploited to execute arbitrary and be used as part of a supply chain...
Artificial Intelligence
New CISA guidelines categorize AI risks into three significant types and pushes a four-part mitigation strategy.
Cloud Security
A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.
Vulnerabilities
Artificial Intelligence
Vulnerabilities
The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process.
Malware & Threats
