Category: SecurityWeek

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Nov
2023

DPI: Still Effective for the Modern SOC?

There has been an ongoing debate in the security industry over the last decade or so about whether or not…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Nov
2023

Malicious NuGet Packages Abuse MSBuild Integrations for Code Execution

As part of an ongoing and coordinated campaign, threat actors have been continuously publishing malicious NuGet packages with hidden code…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Nov
2023

SIEM and Log Management Provider Graylog Raises $39 Million

Security information and event management (SIEM) and log management provider Graylog on Tuesday announced that it has raised $39 million…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Nov
2023

Cutting-Edge AI Raises Fears About Risks to Humanity. Are Tech and Political Leaders Doing Enough?

Chatbots like ChatGPT wowed the world with their ability to write speeches, plan vacations or hold a conversation as good…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Nov
2023

Former British Cyberespionage Agency Employee Gets Life in Prison for Stabbing an American Spy

A former British cyberespionage employee who had become angry and resentful toward his agency’s work was sentenced Monday to life…

CISOs Spooked by SEC Lawsuit against SolarWinds CISO
31
Oct
2023

Cybersecurity Leaders Spooked by SEC Lawsuit Against SolarWinds CISO

In a development sparking chatter and debate through the cybersecurity world, the lawsuit filed by the the U.S. Securities and…

Palo Alto Networks acquires Dig Security
31
Oct
2023

Palo Alto Networks to Acquire Cloud Security Start-Up Dig Security

Palo Alto Networks (NASDAQ: PANW) announced on Tuesday that it has entered into a definitive agreement to acquire Dig Security,…

Confluence Vulnerability (Atlassian Confluence CVE-2023-22518)
31
Oct
2023

Atlassian CISO Urges Quick Action to Protect Confluence Instances From Critical Vulnerability

Enterprise software maker Atlassian on Monday urged all Confluence Data Center and Server customers to patch their instances against a…

API Security
31
Oct
2023

IAM Credentials in Public GitHub Repositories Harvested in Minutes

A threat actor is harvesting identity and access management (IAM) credentials from public GitHub repositories within five minutes of exposure,…

F5 BIG-IP Vulnerability
31
Oct
2023

Attackers Exploiting Critical F5 BIG-IP Vulnerability

Exploitation of a recently patched critical vulnerability in F5’s  BIG-IP product started less than five days after public disclosure and…

ZTNA Zero Trust
31
Oct
2023

Extending ZTNA to Protect Against Insider Threats

Cyberthreats are growing in their pervasiveness, stealth, and severity, and the potential consequences of a breach are more severe than…

SolarWinds CISO Charged
31
Oct
2023

SEC Charges SolarWinds and Its CISO With Fraud and Cybersecurity Failures

In a surprising development on Monday that is spooking the cybersecurity community, the Securities and Exchange Commission (SEC) has filed…