Vulnerabilities
Google has released a Chrome 114 security update that patches CVE-2023-3079, the third zero-day vulnerability patched in the browser in 2023.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Data Breaches
Verizon’s 16th annual Data Breach Investigations Report (DBIR) provides data on ransomware costs, the frequency of human error in breaches, and BEC trends.
Supply Chain Security
If after eighteen months, meaningful use of SBOMs is unachievable, we need to ask what needs to be done to fulfill Biden’s executive order.
Cybercrime
The recent MOVEit zero-day attack has been linked to a known ransomware group, which reportedly stole data from dozens of organizations.
Vulnerabilities
A zero-day vulnerability in Progress Software’s MOVEit Transfer product has been exploited to hack organizations and steal their data.
Cyberwarfare
Kaspersky said its corporate network has been targeted with a zero-click iOS exploit, just as Russia's FSB said iPhones have been targeted by US...
Endpoint Security
A backdoor feature found in hundreds of Gigabyte motherboard models can pose a significant supply chain risk to organizations.
Vulnerabilities
The recently discovered Barracuda zero-day vulnerability CVE-2023-2868 has been exploited to deliver malware and steal data since at least October 2022.
ICS/OT
Mandiant has analyzed a new Russia-linked ICS malware named CosmicEnergy that is designed to cause electric power disruption.
Cyberwarfare
In a campaign called Volt Typhoon, Microsoft says Chinese government hackers were siphoning data from critical infrastructure organizations in Guam, a U.S. territory in...
Mobile & Wireless
Samsung smartphone users warned about CVE-2023-21492, an ASLR bypass vulnerability exploited in the wild, likely by a spyware vendor.
Mobile & Wireless
Apple has patched 3 zero-days, two of which are the vulnerabilities patched with the tech giant’s first Rapid Security Response updates.
ICS/OT
Technological equipment supplier Lacroix has closed three production sites after experiencing a ransomware attack.
Cybercrime
The US is offering a $10 million reward for information on a Russian man accused of launching ransomware attacks on critical infrastructure.
ICS/OT
Critical vulnerabilities found in Teltonika products by industrial cybersecurity firms Otorio and Claroty expose thousands of internet-exposed devices to attacks.
Application Security
Former ByteDance executive said China government officials maintained access to all TikTok data, including information stored in the United States.
Data Breaches
A decade-long data breach in Toyota’s online service put some information on more than 2 million vehicles at risk.
ICS/OT
US government investigating whether the Chinese operations of industrial giant Rockwell Automation pose a cybersecurity risk to critical infrastructure.
CISO Conversations
Joanna Burkey, CISO at HP, and Kevin Cross, CISO at Dell, discuss how the role of a CISO is different for a multinational corporation...
Cyberwarfare
The US government has announced the disruption of Snake, a sophisticated cyberespionage malware officially attributed to a unit of Russia’s FSB agency.
Data Breaches
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.
Email Security
Artificial Intelligence
Incident Response
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
Malware & Threats
Malware & Threats
