VMScape: Academics Break Cloud Isolation With New Spectre Attack
A group of academic researchers from the ETH Zurich university have devised a new attack that breaks existing virtualization isolation to leak arbitrary memory and…
Category: SecurityWeek
CISA: CVE Program to Focus on Vulnerability Data Quality
The US cybersecurity agency CISA believes that expanded partnerships, government sponsorships, transparency, modernization, and better vulnerability data quality are the next step in advancing the…
F5 to Acquire CalypsoAI for $180 Million
Security and application delivery solutions provider F5 on Thursday announced plans to acquire AI security firm CalypsoAI for $180 million. CalypsoAI has developed a platform…
In Other News: $900k for XSS Bugs, HybridPetya Malware, Burger King Censors Research
SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories…
Apple Sends Fresh Wave of Spyware Notifications to French Users
Apple in early September sent a fresh wave of threat notifications to French users it believes might have been targeted by commercial spyware. This is…
DELMIA Factory Software Vulnerability Exploited in Attacks
Threat actors are exploiting a critical-severity vulnerability in DELMIA Apriso factory software, the US cybersecurity agency CISA warns. Developed by French company Dassault Systèmes, DELMIA…
In Other News: FBI Warns of BadBox 2, NSO Disputes WhatsApp Fine, 1,000 Leave CISA
SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories…
US Offering $10 Million Reward for RedLine Malware Developer
The US Department of State, through its Rewards for Justice program, is offering a reward of up to $10 million for information on Maxim Alexandrovich…
MIND Raises $30 Million for Data Loss Prevention
Data loss prevention (DLP) provider MIND this week announced raising $30 million in Series A funding, which brings the total raised by the company to…
Destructive ‘PathWiper’ Targeting Ukraine’s Critical Infrastructure
Russian threat actors are once again targeting Ukraine’s critical infrastructure with destructive malware, a fresh report from Cisco Talos shows. Wiper attacks against Ukraine were…
Cisco Patches Critical ISE Vulnerability With Public PoC
Cisco this week announced fixes for a dozen vulnerabilities in its products, including a critical-severity flaw impacting the cloud deployments of Identity Services Engine (ISE)…
HPE Patches Critical Vulnerability in StoreOnce
Hewlett Packard Enterprise (HPE) this week announced fixes for multiple vulnerabilities in StoreOnce software, including a critical flaw leading to authentication bypass. The StoreOnce software…