FortiBleed: 86,000 Fortinet Device Credentials Compromised
CISA is urging organizations to harden their internet-accessible Fortinet devices in response to a large-scale credential theft campaign that likely impacts over 86,000 firewalls and…
Category: SecurityWeek
In Other News: Apple Patches Beats Eavesdropping Flaw, DOT Closes Delta CrowdStrike Probe, AWS Continuum
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader…
CryptoBandits Malware Doubles as a Backdoor, Abuses Tor
Microsoft warns of a Windows-based cryptocurrency clipper that establishes a lightweight backdoor blending data exfiltration and remote code execution (RCE) capabilities. Dubbed CryptoBandits, the malware…
Cybersecurity Firms Impacted by Klue Supply Chain Attack
Cybersecurity firms Huntress and Recorded Future have disclosed the impact of a supply chain attack that hit market intelligence platform Klue. The attack started on…
Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure
A critical Splunk Enterprise vulnerability is being exploited in attacks only days after its public disclosure, and organizations have been urged to patch it immediately.…
No Exploits Required – SecurityWeek
Well hey y’all. I just got hooked up with this space to somewhat-routinely write about vulnerabilities, cybersecurity, and infosec history. I’m currently at runZero, where…
Majority of Internet-Accessible REDCap Servers Outdated
The majority of internet-accessible REDCap servers are running outdated software versions, making them prime targets for state-sponsored threat actors, according to internet intelligence firm Censys.…
Accenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity Push
Accenture on Thursday announced that it’s taking a majority stake in Dragos and fully acquiring runZero and NetRise as part of a major OT cybersecurity…
F5 Patches Critical, High-Severity NGINX Vulnerabilities
F5 on Wednesday released out-of-band security updates to resolve multiple NGINX vulnerabilities, including critical flaws that could lead to code execution. The most severe are…
Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software
Rockwell Automation informed customers on Tuesday that patches are available for several vulnerabilities affecting its Logix and CompactLogix controllers, Flex I/O dual-port Ethernet/IP adapters, RSLinx…
Tenet Security Emerges From Stealth With $6 Million Seed Funding
Originating in Tel Aviv-Yafo, Israel, and now headquartered in the US, Tenet aims to detect and stop dangerous AI agentic behavior in real time. TenetSecurity.ai…
1Password Acquires Apono in Reported $250M-$300M Deal
Password, secret, and access management solutions provider 1Password announced this week that it has acquired Apono, an Israel-based company that specializes in just-in-time access governance…