Malware & Threats
The StripedFly malware has APT-like capabilities, but remained unnoticed for five years, posing as a cryptocurrency miner.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Mobile & Wireless
New iLeakage side-channel speculative execution attack exploits Safari to steal sensitive information from Macs and iPhones.
ICS/OT
Mandiant's Chief analyst urges critical infrastructure defenders to work on finding and removing traces of Volt Typhoon, a Chinese government-backed hacking team caught in...
Malware & Threats
Cisco has found a second zero-day vulnerability that has been exploited in recent attacks as the number of hacked devices has started dropping.
Data Breaches
Okta warns that hackers broke into its support case management system and stole sensitive data that can be used to impersonate valid users.
Nation-State
Iran-linked hacking group Crambus spent eight months inside a compromised network of a Middle Eastern government, Broadcom’s Symantec cybersecurity unit reports.
Vulnerabilities
Mandiant says the recently patched Citrix NetScaler vulnerability CVE-2023-4966 had been exploited as zero-day since August.
Malware & Threats
Tens of thousands of Cisco devices have reportedly been hacked via the exploitation of the zero-day vulnerability CVE-2023-20198.
Vulnerabilities
Cisco is warning customers that a new IOS XE zero-day vulnerability tracked as CVE-2023-20198 is being exploited to hack devices.
ICS/OT
A vulnerability affecting Milesight industrial routers, tracked as CVE-2023-43261, may have been exploited in attacks.
CISO Strategy
How much do CISOs make? Survey provides compensation trends for Chief Information Security Officers, but don't take surveys at full face value.
Vulnerabilities
CISA has added five bugs to its Known Exploited Vulnerabilities catalog, including the recent WordPad, Skype, and HTTP/2 zero-days.
Network Security
A zero-day vulnerability named HTTP/2 Rapid Reset has been exploited to launch some of the largest DDoS attacks in history.
Hacker Conversations
SecurityWeek continues its Hacker Conversations series in a discussion with Natalie Silvanovich, a member of of Google's Project Zero.
Cyberwarfare
Several hacker groups have joined in on the Israel-Hamas war that started over the weekend after the militant group launched a major attack.
Vulnerabilities
CISA has removed from its KEV catalog five Owl Labs video conferencing flaws that require the attacker to be in Bluetooth range.
Data Breaches
Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups.
Mobile & Wireless
Qualcomm has patched more than two dozen vulnerabilities, including three zero-days that may have been exploited by spyware vendors.
Artificial Intelligence
ShellTorch attack chains critical TorchServe vulnerabilities and could completely compromise the AI infrastructure of major companies.
Mobile & Wireless
The October 2023 security update for Android patches two vulnerabilities exploited in attacks, both likely linked to spyware vendors.
Data Breaches
The cybercrime gang has listed major companies such as Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision.
Artificial Intelligence
Vulnerabilities
Cybersecurity Funding
Vulnerabilities
