US, UK Sanction More Members of Trickbot Russian Cybercrime Group
The United States and the United Kingdom on Thursday announced sanctions against more alleged members of the Russian cybercrime group named Trickbot. Earlier this year,…
Category: SecurityWeek
Apple Patches Actively Exploited iOS, macOS Zero-Days
Apple on Thursday pushed out an urgent point-update to its flagship iOS and macOS platforms to fix a pair of security defects being exploited in…
Rigged Software and Zero-Days: North Korean APT Caught Hacking Security Researchers
Google’s threat hunting unit has again intercepted an active North Korean APT actor sliding into the DMs of security researchers and using zero-days and rigged…
Wealthy Russian With Kremlin Ties Gets 9 Years in Prison for Hacking and Insider Trading Scheme
A wealthy Russian businessman with ties to the Kremlin was sentenced Thursday to nine years in prison for his role in a nearly $100 million…
The Team8 Foundry Method for Selecting Investable Startups
Team8 regularly consults with its CISO Village of around 350 enterprise CISOs over startup investments. AI security, 3rd party risk management, and the insider threat…
See Tickets Alerts 300,000 Customers After Another Web Skimmer Attack
Ticketing services agency See Tickets has notified more than 300,000 individuals that their payment card data was stolen in a new web skimmer attack. Owned…
‘Atomic macOS Stealer’ Malware Delivered via Malvertising Campaign
A piece of malware named Atomic macOS Stealer, or AMOS, has been delivered by cybercriminals through a malvertising campaign, Malwarebytes warned on Wednesday. AMOS emerged…
CISA Releases Guidance on Adopting DDoS Mitigations
The US Cybersecurity and Infrastructure Security Agency (CISA) has released new guidance to help federal agencies adopt distributed denial-of-service (DDoS) mitigations. DDoS attacks are a…
Cisco Patches Critical Vulnerability in BroadWorks Platform
Cisco on Wednesday announced patches for a critical-severity vulnerability in the BroadWorks Application Delivery Platform and BroadWorks Xtended Services Platform. Tracked as CVE-2023-20238, the vulnerability…
Tenable to Acquire Cloud Security Firm Ermetic for $240 Million
Exposure management solutions provider Tenable announced on Thursday that it has entered into a definitive agreement to acquire Israeli cloud security startup Ermetic for roughly…
IBM Discloses Data Breach Impacting Janssen Healthcare Platform
IBM is notifying customers and users of a Johnson & Johnson healthcare platform that their personal information may have been compromised as a result of…
Cisco Finds 8 Vulnerabilities in OAS Industrial IoT Data Platform
Multiple vulnerabilities in the Open Automation Software (OAS) Platform can be exploited to bypass authentication, leak sensitive information, and overwrite files, Cisco warns. Enabling communication…