Hacker Conversations: Casey Ellis, Hacker and Ringmaster at Bugcrowd
In this edition of Hacker Conversations, SecurityWeek talks to Casey Ellis, founder, chairman and CTO at Bugcrowd – and hacker. Bugcrowd provides a crowdsourced ethical…
Category: SecurityWeek
CISA Says Owl Labs Vulnerabilities Requiring Close Physical Range Exploited in Attacks
The US cybersecurity agency CISA says four vulnerabilities found last year in Owl Labs video conferencing devices — flaws that require the attacker to be…
Microsoft AI Researchers Expose 38TB of Data, Including Keys, Passwords and Internal Messages
Researchers at Wiz have flagged another major security misstep at Microsoft that caused the exposure of 38 terabytes of private data during a routine open…
OT/IoT and OpenTitan, an Open Source Silicon Root of Trust
OpenTitan is a project aimed at bringing the success of open source software to the silicon design space – specifically a silicon-level root of trust.…
Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates
Google has announced that it is committed to provide regular automatic updates, with security patches, for all recent Chromebook iterations for a period of 10…
Two Vegas Casinos Fell Victim to Cyberattacks, Shattering the Image of Impenetrable Casino Security
A persistent error message greeted Dulce Martinez on Monday as she tried to access her casino rewards account to book accommodations for an upcoming business…
Canadian Government Targeted With DDoS Attacks by Pro-Russia Group
The pro-Russian cybercrime group named NoName057(16) has been observed launching distributed denial-of-service (DDoS) attacks against Canadian organizations, a fresh government alert warns. Since March 2022,…
Fortinet Patches High-Severity Vulnerabilities in FortiOS, FortiProxy, FortiWeb Products
Fortinet has released patches for a high-severity cross-site scripting (XSS) vulnerability impacting multiple FortiOS and FortiProxy versions. Tracked as CVE-2023-29183 (CVSS score of 7.3), the…
TikTok Is Hit With $368 Million Fine Under Europe’s Strict Data Privacy Rules
European regulators slapped TikTok with a $368 million fine on Friday for failing to protect children’s privacy, the first time that the popular short video-sharing…
CISA Releases New Identity and Access Management Guidance
The US Cybersecurity and Infrastructure Security Agency (CISA) has released new guidance on how federal agencies can integrate identity and access management (IDAM) capabilities into…
ICS Security Firm Dragos Raises $74 Million in Series D Extension
Dragos, a company that specializes in protecting industrial control systems (ICS) and other operational technology (OT) against cyber threats, on Monday announced raising $74 million…
Imagine Making Shadowy Data Brokers Erase Your Personal Info. Californians May Soon Live the Dream
You may not know it, but thousands of often shadowy companies routinely traffic in personal data you probably never agreed to share — everything from…