CISA Warns of Attacks Exploiting Sophos Web Appliance Vulnerability
The US cybersecurity agency CISA added Sophos, Oracle and Microsoft product flaws to its Known Exploited Vulnerabilities (KEV) catalog on Thursday. The Sophos flaw that…
Category: SecurityWeek
CitrixBleed Vulnerability Exploitation Suspected in Toyota Ransomware Attack
Toyota Financial Services Europe & Africa this week confirmed being targeted in a cyberattack, which appears to have been conducted by a known ransomware group.…
Google Adds Passkey Support to New Titan Security Key
Google this week launched a new version of its Titan security key, which adds support for passkeys. The Titan security key is a phishing-resistant two-factor…
Biden Campaign Looking for CISO
The Biden for President campaign is searching for a Chief Information Security Officer (CISO) to lead its IT and security division. The campaign said the…
Zimbra Zero-Day Exploited to Hack Government Emails
Google’s Threat Analysis Group (TAG) revealed on Thursday that a Zimbra Collaboration Suite zero-day was exploited earlier this year to steal email data from government…
State-Sponsored Online Spies Likely to Target Australian Submarine Program, Spy Agency Says
Australia’s cooperation with the United States and Britain to develop an Australian fleet of submarines powered by U.S. nuclear technology is a likely target of…
Bad Bots Account for 73% of Internet Traffic: Analysis
Arkose Labs has analyzed and reported on tens of billions of bot attacks from January through September 2023, collected via the Arkose Labs Global Intelligence…
Administrator of Darkode Hacking Forum Sentenced to Prison
The US Justice Department announced on Wednesday that a man who admitted being an administrator of a now-defunct cybercrime forum named Darkode has been sentenced…
Threat Intel: To Share or Not to Share is Not the Question
From its inception, the discipline of cyber threat intelligence has been about sharing. Informing cybersecurity teams, tools and best practices about threat actors and their…
Ransomware Group Files SEC Complaint Over Victim’s Failure to Disclose Data Breach
A notorious ransomware group has filed a complaint with the US Securities and Exchange Commission (SEC) over the failure of a victim to disclose an…
Microsoft Patches Sensitive Information Disclosure Vulnerability in Azure CLI
Microsoft on Tuesday released patches and guidance for addressing a high-severity vulnerability in Azure Command-Line Interface (CLI) that could result in the exposure of sensitive…
Data Security Firm ALTR Banks $25M Series C
Late-stage data security startup ALTR on Wednesday announced the closing of a $25 million funding round to continue building and marketing its SaaS-based data access…