Linux Foundation Unveils New Open Source Security Project Akrites
The Linux Foundation on Thursday announced a new industry effort aimed at efficiently addressing vulnerabilities in the open source software (OSS) ecosystem. Named Akrites, it…
Category: SecurityWeek
In Other News: Chinese Mythos-Like AI, Tata Electronics Breach, Snyk Layoffs
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader…
More Klue Breach Victims Identified as Hackers Get Hacked
Roughly two dozen Klue customers have come forward and confirmed that their Salesforce instances were compromised in a supply chain attack earlier this month. The…
Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories
Researchers at Wiz have disclosed a high-severity vulnerability in the Amazon Q Developer extension for Visual Studio Code that could allow attackers to steal developers’…
Nebulock Raises $25 Million for AI-Native Contextual Security
Cybersecurity startup Nebulock has announced raising $25 million in a Series A funding round that brings the total raised by the company to over $33…
First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild
Threat actors have successfully exploited a vulnerability in PTC Windchill in the wild, marking the first confirmed real-world abuse of the popular product lifecycle management…
GitLab Patches Code Execution, Information Disclosure Vulnerabilities
GitLab has rolled out Community Edition (CE) and Enterprise Edition (EE) security updates that resolve 13 vulnerabilities, including three high-severity bugs. The most severe is…
Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning
A vulnerability that can facilitate attacks on operational technology (OT) systems is being exploited in the wild, according to the cybersecurity agency CISA. The vulnerability…
Cal Water Says No OT Systems Breached in Iranian Handala Cyberattack
The investigation conducted by California Water Service (Cal Water) into the recent cyberattack claimed by the Iranian hacker group Handala found no evidence of activity…
Runlayer Raises $30 Million in Series A Funding
AI enablement and control platform Runlayer has raised $30 million in a Series A funding round that brings the total raised by the company to…
NIST Opens Updated IoT Security Guidance to Public Review
The National Institute of Standards and Technology (NIST) announced Wednesday that it’s seeking public feedback on updated Internet of Things (IoT) security guidelines. Updated to…
Exclusive: Meet AIVEX, a New Triage Model Built to Reduce Supply Chain Threat and Risk
Remediation priority (vulnerability triaging) traditionally focuses on Software Bill of Materials (SBOMs) and Vulnerability Exploitability eXchange (VEX) statements provided with the software and supplemented by…