Vulnerabilities
A critical vulnerability in the Houzez premium WordPress theme and plugin has been exploited in the wild.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Data Breaches
LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...
Nation-State
The U.S. government is set to green-light a more aggressive ‘hack-back’ approach to dealing with foreign adversaries and mandatory regulation of critical infrastructure vendors.
Cybercrime
On the first anniversary of Russia’s invasion of Ukraine, cybersecurity companies summarize the cyber operations they have seen and their impact.
Ransomware
Dole was forced to shut down systems in North America due to a ransomware attack, which has reportedly led to salad shortages in some...
Vulnerabilities
Hackers started exploiting the Fortinet FortiNAC vulnerability CVE-2022-39952 the same day a PoC exploit was released.
Vulnerabilities
CISA has added two Mitel MiVoice Connect vulnerabilities to its known exploited vulnerabilities catalog and instructed federal agencies to patch them within three weeks.
Vulnerabilities
Apple has updated its security advisories to add new iOS and macOS vulnerabilities, including ones belonging to a new class of bugs.
Artificial Intelligence
The CRYSTALS-Kyber public-key encryption and key encapsulation mechanism recommended by NIST for post-quantum cryptography has been broken using AI combined with side channel attacks.
Data Breaches
GoDaddy recently discovered a hacker attack where a sophisticated threat group infected websites and servers with malware.
Data Breaches
A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.
Cyberwarfare
A look at some of the lessons from the Ukraine war and how they could apply to a Taiwan conflict.
Ransomware
Hundreds of new servers were compromised in the past days as part of ESXiArgs ransomware attacks, but it’s still unclear which vulnerability is being...
Malware & Threats
A vulnerability affecting IBM’s Aspera Faspex file transfer solution, tracked as CVE-2022-47986, has been exploited in attacks.
ICS/OT
Cybersecurity firm Forescout shows how various ICS vulnerabilities can be chained for an exploit that allows hackers to cause damage to a bridge.
CISO Conversations
SecurityWeek examines the role of the virtual CISO in a conversation with Chris Bedel and Greg Schaffer.
Cybercrime
Organizations hit by exploitation of the GoAnywhere MFT zero-day vulnerability CVE-2023-0669 have started coming forward.
Vulnerabilities
Apple has released updates for macOS, iOS and Safari and they all include a WebKit patch for a zero-day vulnerability tracked as CVE-2023-23529.
Cyberwarfare
The war in Ukraine is the first major conflagration between two technologically advanced powers in the age of cyber. It prompts us to question...
Ransomware
The Play ransomware group has claimed responsibility for a cyberattack on application delivery controller maker A10 Networks
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
