Category: SecurityWeek

ICS Cybersecurity Conference Expo Floor
26
Oct
2023

Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions

SecurityWeek’s 2023 ICS Cybersecurity Conference continues today in Atlanta, as hundreds of industrial cybersecurity stakeholders gather for Day 3 of…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
25
Oct
2023

‘YoroTrooper’ Espionage Group Linked to Kazakhstan

The YoroTrooper espionage group likely consists of individuals from Kazakhstan, Cisco’s Talos security researchers report. Active since at least June…

New iOS exploit blamed on US intelligence
25
Oct
2023

Apple Ships Major iOS, macOS Security Updates

Device maker Apple on Wednesday rolled out major security updates for its flagship macOS and iOS platforms, warning that multiple…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
25
Oct
2023

Firefox, Chrome Updates Patch High-Severity Vulnerabilities

Mozilla and Google this week announced software updates for Firefox and Chrome that address multiple high-severity vulnerabilities, including memory safety…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
25
Oct
2023

Russian Hackers Caught Exploiting Roundcube Webmail Zero-Day

The Russia-linked advanced persistent threat (APT) actor Winter Vivern has been observed exploiting a zero-day vulnerability in the Roundcube webmail…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
25
Oct
2023

Hackers Earn $400k on First Day at Pwn2Own Toronto 2023

The Pwn2Own Toronto 2023 hacking contest kicked off yesterday and participants successfully hacked NAS, printers, mobile phones, and other types…

John Hultquist, Mandiant
25
Oct
2023

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure

ATLANTA – SECURITYWEEK 2023 ICS CYBERSECURITY CONFERENCE – Chief analyst at Mandiant Intelligence John Hultquist says defenders in the critical…

VMware zero-day CVE-2023-20867 exploited
25
Oct
2023

VMware vCenter Flaw So Critical, Patches Released for End-of-Life Products

Virtualization technology powerhouse VMware is calling urgent attention to a critical remote code execution flaw haunting its vCenter Server and…

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding
25
Oct
2023

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding

ATLANTA – SECURITYWEEK 2023 ICS CYBERSECURITY CONFERENCE – A new project aims to make it easier for PLC programmers to…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
25
Oct
2023

Censys Banks $75M for Attack Surface Management Technology

Michigan startup Censys has deposited $75 million in new funding as venture capital investors continue to bet big on technology…

Cybercrime
25
Oct
2023

The Cybersecurity Resilience Quotient: Measuring Security Effectiveness

In the ever-changing landscape of cybersecurity, where threats morph, adversaries grow increasingly sophisticated, and new technology is adopted at ever…

John Hultquist, Mandiant
25
Oct
2023

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference

SecurityWeek’s 2023 ICS Cybersecurity Conference continues today in Atlanta, as hundreds of industrial cybersecurity stakeholders gather for Day 2 of…