‘Cybersecurity Incident’ Hits ICC
The International Criminal Court was hit by what it called “anomalous activity” regarding its IT systems and that it was currently responding to this “cybersecurity…
Category: SecurityWeek
Pakistani APT Uses YouTube-Mimicking RAT to Spy on Android Devices
Pakistan-linked state-sponsored threat actor Transparent Tribe has been observed using new versions of the CapraRAT Android trojan that mimic the appearance of YouTube, SentinelOne reports.…
Alcion Raises $21 Million for Backup-as-a-Service Platform
Data management startup Alcion today announced that it has raised $21 million in a Series A funding round that brings the total raised by the…
Thousands of Juniper Appliances Vulnerable to New Exploit
Threat intelligence firm VulnCheck has published details on a new exploit targeting a recent Junos OS vulnerability and says that thousands of Juniper Networks appliances…
Hacker Conversations: Casey Ellis, Hacker and Ringmaster at Bugcrowd
In this edition of Hacker Conversations, SecurityWeek talks to Casey Ellis, founder, chairman and CTO at Bugcrowd – and hacker. Bugcrowd provides a crowdsourced ethical…
CISA Says Owl Labs Vulnerabilities Requiring Close Physical Range Exploited in Attacks
The US cybersecurity agency CISA says four vulnerabilities found last year in Owl Labs video conferencing devices — flaws that require the attacker to be…
Microsoft AI Researchers Expose 38TB of Data, Including Keys, Passwords and Internal Messages
Researchers at Wiz have flagged another major security misstep at Microsoft that caused the exposure of 38 terabytes of private data during a routine open…
OT/IoT and OpenTitan, an Open Source Silicon Root of Trust
OpenTitan is a project aimed at bringing the success of open source software to the silicon design space – specifically a silicon-level root of trust.…
Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates
Google has announced that it is committed to provide regular automatic updates, with security patches, for all recent Chromebook iterations for a period of 10…
Two Vegas Casinos Fell Victim to Cyberattacks, Shattering the Image of Impenetrable Casino Security
A persistent error message greeted Dulce Martinez on Monday as she tried to access her casino rewards account to book accommodations for an upcoming business…
Canadian Government Targeted With DDoS Attacks by Pro-Russia Group
The pro-Russian cybercrime group named NoName057(16) has been observed launching distributed denial-of-service (DDoS) attacks against Canadian organizations, a fresh government alert warns. Since March 2022,…
Fortinet Patches High-Severity Vulnerabilities in FortiOS, FortiProxy, FortiWeb Products
Fortinet has released patches for a high-severity cross-site scripting (XSS) vulnerability impacting multiple FortiOS and FortiProxy versions. Tracked as CVE-2023-29183 (CVSS score of 7.3), the…