Category: SecurityWeek

Patch Tuesday: Critical Flaws in Adobe Commerce Software
06
Sep
2023

AtlasVPN to Patch IP Leak Vulnerability After Public Disclosure

AtlasVPN developers are working on a patch for an IP leak vulnerability whose details were made public by a researcher…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
06
Sep
2023

United Airlines Says the Outage That Held Up Departing Flights Was Not a Cybersecurity Issue

United Airlines said Tuesday that a software update triggered a glitch that forced it to halt departures nationwide, briefly crippling…

Security-byDesign and -Default
05
Sep
2023

CISA Hires ‘Mudge’ to Work on Security-by-Design Principles

The U.S. government’s cybersecurity agency CISA on Monday confirmed the addition of Peiter ‘Mudge’ Zatko to its roster of prominent…

9 Vulnerabilities Patched in SEL Power System Management Products 
05
Sep
2023

9 Vulnerabilities Patched in SEL Power System Management Products 

Nine vulnerabilities, including potentially serious flaws, were patched recently in a couple of electric power management products made by Schweitzer…

ICS Cybersecurity Conference
05
Sep
2023

MITRE and CISA Release Open Source Tool for OT Attack Emulation

The MITRE Corporation and the US Cybersecurity and Infrastructure Security Agency (CISA) today announced a new extension for the open…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
05
Sep
2023

7 Million Users Possibly Impacted by Freecycle Data Breach

Freecycle.org, a platform that allows users to recycle their belongings, has prompted millions of users to reset their passwords after…

Trains hacked in Poland
05
Sep
2023

Norfolk Southern Says a Software Defect — Not a Hacker — Forced It to Park Its Trains This Week

Norfolk Southern believes a software defect — not a hacker — was the cause of the widespread computer outage that…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
05
Sep
2023

Developers Warned of Malicious PyPI, NPM, Ruby Packages Targeting Macs

Threat actors have started uploading malicious packages to PyPI, NPM, and RubyGems repositories in a new campaign aimed at stealing…

Okta hack
05
Sep
2023

Okta Says US Customers Targeted in Sophisticated Attacks

Identity and access management solutions provider Okta warns that multiple customers based in the United States have been targeted in…

M&A cybersecurity
05
Sep
2023

Cybersecurity M&A Roundup: 40 Deals Announced in August 2023

Forty cybersecurity-related merger and acquisition (M&A) deals were announced in August 2023. The number of transactions has bounced back in…

Industrial Organizations in Eastern Europe Targeted by Chinese Cyberspies
05
Sep
2023

Ransomware Attack on Fencing Systems Maker Zaun Impacts UK Military Data

British mesh fencing systems maker Zaun has disclosed a LockBit ransomware attack that potentially led to the compromise of data…

VMWare
01
Sep
2023

Exploit Code Published for Critical-Severity VMware Security Defect

Just days after shipping a major security update to correct vulnerabilities in its Aria Operations for Networks product line, VMWare…