Microsoft Bows to Pressure to Free Up Cloud Security Logs
Facing intense pressure to free up access to cloud security logs, Microsoft on Wednesday said it would expand logging defaults for lower-tier M365 customers and…
Category: SecurityWeek
Virtual Event Today: 2023 Cloud & Data Security Summit
SecurityWeek’s 2023 Cloud & Data Security Summit kicks off today! This fully immersive 3D virtual event will take place on Wednesday, July 19th from 11AM –…
Recycling Giant Tomra Takes Systems Offline Following Cyberattack
Norwegian recycling giant Tomra has taken some of its systems offline after falling victim to what it describes as “an extensive cyberattack”. A multinational company,…
Two Jira Plugin Vulnerabilities in Attacker Crosshairs
Attackers are apparently trying to exploit two path traversal vulnerabilities in the ‘Stagil navigation for Jira – Menus & Themes’ plugin, the SANS Internet Storm…
Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks
Over a dozen vulnerabilities patched recently by GE in its Cimplicity product are reminiscent of industrial control system (ICS) attacks conducted by a notorious Russian…
Chrome 115 Patches 20 Vulnerabilities
Google on Tuesday announced the release of Chrome 115 to the stable channel, with patches for 20 vulnerabilities, including 11 reported by external researchers. Of…
Oracle Releases 508 New Security Patches With July 2023 CPU
Oracle on Tuesday announced the release of 508 new security patches as part of the July 2023 CPU, including more than 75 patches that resolve…
Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned
Citrix on Tuesday announced patches for three vulnerabilities, including an actively exploited zero-day that allows remote code execution. The zero-day, tracked as CVE-2023-3519 and rated…
US Gov Mercenary Spyware Clampdown Hits Cytrox, Intellexa
The U.S. government’s clampdown on commercial spyware and mercenary hacking companies ramped up this week with the addition of Cytrox and Intellexa to an ‘entity…
NSA, CISA Issue Guidance on 5G Network Slicing Security
The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) on Monday published guidance on hardening 5G standalone network slices against potential…
Nigerian Man Sentenced to 8 Years in US Prison for $8 Million BEC Scheme
A Nigerian national who had been living in the United Arab Emirates has been sentenced to more than eight years in a US prison for…
Black Hat Hacker Exposes Real Identity After Infecting Own Computer With Malware
A threat actor infected their own computer with an information stealer, which has allowed Israeli threat intelligence company Hudson Rock to uncover their real identity.…