Endpoint Security
Apple's security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Ransomware
Qlik Sense vulnerabilities CVE-2023-41266, CVE-2023-41265 and CVE-2023-48365 exploited for initial access in Cactus ransomware attacks.
Identity & Access
Okta expands scope of October breach, saying hackers stole names and email addresses of all its customer support system users.
Vulnerabilities
The latest Chrome security update addresses the seventh exploited zero-day vulnerability documented in the browser in 2023.
Malware & Threats
Threat actors have started exploiting a critical ownCloud vulnerability leading to sensitive information disclosure.
ICS/OT
Municipal Water Authority of Aliquippa in Pennsylvania confirms that hackers took control of a booster station, but says no risk to drinking water or...
Artificial Intelligence
The U.S. military is increasing use of AI technology that will fundamentally alter the nature of war.
Supply Chain Security
North Korean hackers breached a Taiwanese company and used its systems to deliver malware to the US, Canada, Japan and Taiwan in a supply...
Artificial Intelligence
San Francisco-based OpenAI has reached an agreement in principle for Sam Altman to return to OpenAI as CEO with a new initial board.
Vulnerabilities
Administrators are urged to patch the recent CitrixBleed NetScaler vulnerability as LockBit starts exploiting it.
Artificial Intelligence
Interview with Craig Martell, Chief Digital and AI Officer (CDAO) for the U.S. Department of Defense, about AI use in the military.
Malware & Threats
CISA adds Sophos, Oracle and Microsoft product security holes to its Known Exploited Vulnerabilities (KEV) catalog.
Email Security
Google says a Zimbra zero-day from earlier this year, CVE-2023-37580, was exploited in several campaigns to hack government emails.
Ransomware
Alphv/BlackCat ransomware group files SEC complaint against MeridianLink over its failure to disclose an alleged data breach caused by the hackers.
Malware & Threats
US government announces the takedown of the IPStorm proxy service botnet and the guilty plea of its creator, a Russian/Moldovan national.
Vulnerabilities
CacheWarp is a new attack method affecting a security feature present in AMD processors that can pose a risk to virtual machines.
Cyberwarfare
Denmark’s SektorCERT association shares details on a coordinated attack against the country’s energy sector.
Cybercrime
A cyberattack on Australian shipping giant DP World, which may have been a ransomware attack, has resulted in serious disruptions at major ports.
Endpoint Security
A class action lawsuit has been filed against Intel over its handling of CPU speculative execution vulnerabilities, with a focus on Downfall.
Ransomware
A ransomware attack on China’s biggest bank, the Industrial and Commercial Bank of China Financial Services, disrupts Treasury market trades.
Data Breaches
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.
Email Security
Artificial Intelligence
Incident Response
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
Malware & Threats
Malware & Threats
