Network Security
Serious flaw affecting major BGP implementations can be exploited to cause prolonged internet outages, but several vendors have not patched it.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Cyber Insurance
If an organization decides to include cyberinsurance within its total cyber risk management posture, that cyberinsurance must be fully integrated with the organization’s cybersecurity...
Data Breaches
Three bankrupt cryptocurrency companies — FTX, BlockFi and Genesis — suffered data breaches following a SIM swapping attack at Kroll.
ICS/OT
As smart cities evolve with more and more integrated connected services, cybersecurity concerns will increase dramatically.
Ransomware
Cybersecurity companies have released a dozen ransomware reports in recent weeks and most of them show a surge in attacks.
Vulnerabilities
While initially it was unclear if the Ivanti Sentry vulnerability CVE-2023-38035 has been exploited, the vendor and CISA have now confirmed it.
Malware & Threats
CISA warns that CVE-2023-26359, an Adobe ColdFusion vulnerability patched in March, has been exploited in the wild.
Endpoint Security
Several major companies have published advisories in response to the Downfall vulnerability affecting Intel CPUs.
Vulnerabilities
Exploitation of a Citrix ShareFile vulnerability tracked as CVE-2023-24489 has spiked as CISA added it to its ‘must patch’ catalog.
CISO Conversations
SecurityWeek talks to Billy Spears, CISO at Teradata (a multi-cloud analytics provider), and Lea Kissner, CISO at cloud security firm Lacework.
Endpoint Security
Several vulnerabilities discovered in Iagona ScrutisWeb ATM fleet monitoring software could be exploited to remotely hack ATMs.
Black Hat
Hundreds of companies and organizations showcased their products and services this week at the 2023 edition of the Black Hat conference in Las Vegas.
Vulnerabilities
CISA has added CVE-2023-38180, a zero-day vulnerability affecting .NET and Visual Studio, to its Known Exploited Vulnerabilities Catalog.
Endpoint Security
Google researcher discloses the details of an Intel CPU attack method named Downfall that may be remotely exploitable.
Black Hat
The cybersecurity industry heads to Las Vegas this week for Black Hat in a state of economic contraction, confusion and excitement. Can the promise...
Cyberwarfare
A sanctioned Russian missile maker appears to have been targeted by two important North Korean hacking groups.
Government
Five Eyes government agencies have published a list of the software vulnerabilities that were most frequently exploited in malicious attacks in 2022.
Email Security
Threat actors have exploited a Salesforce email service zero-day vulnerability and abused Meta features in a sophisticated phishing campaign.
Cloud Security
Microsoft says a Russian government-linked hacking group is using its Microsoft Teams chat app to phish for credentials at targeted organizations.
Endpoint Security
A new power side-channel attack named Collide+Power can allow an attacker to obtain sensitive information and it works against nearly any modern CPU.
Data Breaches
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.
Email Security
Artificial Intelligence
Incident Response
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
Malware & Threats
Malware & Threats
