Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories
Researchers at Wiz have disclosed a high-severity vulnerability in the Amazon Q Developer extension for Visual Studio Code that could allow attackers to steal developers’…
Category: SecurityWeek
Nebulock Raises $25 Million for AI-Native Contextual Security
Cybersecurity startup Nebulock has announced raising $25 million in a Series A funding round that brings the total raised by the company to over $33…
First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild
Threat actors have successfully exploited a vulnerability in PTC Windchill in the wild, marking the first confirmed real-world abuse of the popular product lifecycle management…
GitLab Patches Code Execution, Information Disclosure Vulnerabilities
GitLab has rolled out Community Edition (CE) and Enterprise Edition (EE) security updates that resolve 13 vulnerabilities, including three high-severity bugs. The most severe is…
Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning
A vulnerability that can facilitate attacks on operational technology (OT) systems is being exploited in the wild, according to the cybersecurity agency CISA. The vulnerability…
Cal Water Says No OT Systems Breached in Iranian Handala Cyberattack
The investigation conducted by California Water Service (Cal Water) into the recent cyberattack claimed by the Iranian hacker group Handala found no evidence of activity…
Runlayer Raises $30 Million in Series A Funding
AI enablement and control platform Runlayer has raised $30 million in a Series A funding round that brings the total raised by the company to…
NIST Opens Updated IoT Security Guidance to Public Review
The National Institute of Standards and Technology (NIST) announced Wednesday that it’s seeking public feedback on updated Internet of Things (IoT) security guidelines. Updated to…
Exclusive: Meet AIVEX, a New Triage Model Built to Reduce Supply Chain Threat and Risk
Remediation priority (vulnerability triaging) traditionally focuses on Software Bill of Materials (SBOMs) and Vulnerability Exploitability eXchange (VEX) statements provided with the software and supplemented by…
Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware
Microsoft, law enforcement, and several cybersecurity companies have collaborated to take down infrastructure shared by two widely used malware families: Amadey and StealC. The action,…
When Information Becomes the Attack Surface – Understanding AI Agent Traps
AI agents go beyond answering questions. They can autonomously browse websites, read emails, search company files, query software tools, and more. AI models producing incorrect…
Third DraftKings Hacker Sentenced to 18 Months in Prison
A third man charged for his role in a 2022 hacking attack on the sports and betting website DraftKings has been sentenced to prison, the…