Identity & Access
Okta warned of a spike in credential stuffing attacks using anonymizing services.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Cyberwarfare
A Belarusian hacker activist group claims to have infiltrated the network of the country’s main KGB security agency and accessed personnel files of over...
Malware & Threats
A new Android trojan named Brokewell can steal user’s sensitive information and allows attackers to take over devices.
Incident Response
Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.
Vulnerabilities
CISA warns organizations of a two-year-old Windows Print Spooler vulnerability being exploited in the wild.
Threat Intelligence
Mandiant's M-Trends 2024 report shows that defenses are improving – and that may be true. But the reality remains that these same statistics demonstrate...
Data Protection
Microsoft PlayReady vulnerabilities that could allow rogue subscribers to illegally download movies from popular streaming services.
Nation-State
MITRE R&D network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability.
Cybercrime
Telecom giant Frontier shuts down systems to contain a cyberattack that led to personal information compromise.
Cybercrime
LabHost, a major phishing-as-a-service platform, has been shut down as part of a major law enforcement operation.
Nation-State
Mandiant summarizes some of the latest operations of Russia’s notorious Sandworm group, which it now tracks as APT44.
Vulnerabilities
Oracle releases 441 new security patches to address 230 vulnerabilities as part of its April 2024 Critical Patch Update.
Vulnerabilities
PAM company Delinea over the weekend rushed to patch a critical authentication bypass vulnerability after it apparently ignored the researcher who found the flaw.
Malware & Threats
Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus.
Data Breaches
The US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts "presents a grave and unacceptable risk to federal agencies."
Cloud Security
SecurityWeek speaks to Tom Scholl, VP and distinguished engineer at AWS, on how the organization tackles IP Spoofing and DDoS attacks.
Artificial Intelligence
Google adds AI to cloud security features and announces other security capabilities for cloud customers.
Malware & Threats
Microsoft patches CVE-2024-29988 and CVE-2024-26234, two zero-day vulnerabilities exploited by threat actors to deliver malware.
CISO Conversations
SecurityWeek discusses cybersecurity leadership with CISOs from crowdsourced hacking organizations Bugcrowd (Nick McKenzie) and HackerOne (Chris Evans)
IoT Security
Unpatched D-Link NAS device vulnerability CVE-2024-3273, potentially affecting many devices, is being exploited in the wild.
Cloud Security
A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.
Vulnerabilities
Artificial Intelligence
Vulnerabilities
The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process.
Malware & Threats
