The CISO Carousel and its Effect on Enterprise Cybersecurity
The average tenure of a Chief Information Security Officer said to sit between 18 to 24 months. This is barely enough time to get feet…
Category: SecurityWeek
Xenomorph Android Banking Trojan Targeting Users in US, Canada
Recently identified Xenomorph Android banking trojan samples show an expanded target list that now includes North American users, online fraud detection firm ThreatFabric reports. Initially…
Stealthy APT Gelsemium Seen Targeting Southeast Asian Government
A stealthy advanced persistent threat (APT) actor known as Gelsemium has been observed targeting a government entity in Southeast Asia to establish persistence and collect…
Nigerian Pleads Guilty in US to Million-Dollar BEC Scheme Role
A Nigerian national residing in South Africa last week pleaded guilty in court in the United States to his role in a million-dollar business email…
900 US Schools Impacted by MOVEit Hack at National Student Clearinghouse
The National Student Clearinghouse, an educational nonprofit that provides reporting, verification, and research services to colleges and universities in North America, has revealed that nearly…
City of Dallas Details Ransomware Attack Impact, Costs
The City of Dallas has announced that an $8.5 million budget has been approved to support the restoration of its systems following a May 2023…
Predator Spyware Delivered to iOS, Android Devices via Zero-Days, MitM Attacks
The Predator spyware has been delivered to iPhones and Android devices using iOS and Chrome zero-day vulnerabilities and man-in-the-middle (MitM) attacks, according to Google’s Threat…
In-the-Wild Exploitation Expected for Critical TeamCity Flaw Allowing Server Takeover
A critical vulnerability in the TeamCity CI/CD server could be exploited remotely, without authentication, to execute arbitrary code and gain administrative control over a vulnerable…
Researchers Discover Attempt to Infect Leading Egyptian Opposition Politician With Predator Spyware
A leading Egyptian opposition politician was targeted with spyware after announcing a presidential bid, security researchers reported Friday. They said Egyptian authorities were likely behind…
In Other News: New Analysis of Snowden Files, Yubico Goes Public, Election Hacking
SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a…
Faster Patching Pace Validates CISA’s KEV Catalog Initiative
The Known Exploited Vulnerabilities (KEV) Catalog maintained by the US cybersecurity agency CISA has led to significant improvements in federal agencies’ patching efforts, with more…
China’s Offensive Cyber Operations in Africa Support Soft Power Efforts
Chinese state-sponsored threat groups have targeted telecommunications, financial and government organizations in Africa in support of Beijing’s soft power agenda in the region, according to…