Since January 2023, an Iranian advanced persistent threat (APT) actor has been targeting higher education and technology organizations in Israel with wipers, cybersecurity firm Palo…
The first in-the-wild exploitation attempts targeting a recent vulnerability in Atlassian Confluence Data Center and Confluence Server were observed over the weekend, threat intelligence firm…
Election officials in Mississippi’s most populous county had to scramble to complete required poll worker training after an early September breach involving county computers. In…
Microsoft says four Exchange vulnerabilities disclosed by Trend Micro’s Zero Day Initiative (ZDI) last week have either already been patched or they don’t require immediate…
SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a…
Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop, exposing…
Mortgage giant Mr. Cooper on Thursday announced that it has shut down certain systems after falling victim to a cyberattack, which resulted in its operations…
The notorious North Korean hacking group Lazarus has used new macOS and Windows malware in recent attacks, security researchers warn. In one of the attacks,…
Malicious exploitation of an Apache ActiveMQ vulnerability tracked as CVE-2023-46604 started at least two weeks prior to patches being released, according to managed detection and…
American hardware retailers’ cooperative Ace Hardware is experiencing operation disruptions after a cyberattack crippled most of its key IT systems. According to a notice that…
Enterprise software maker Atlassian on Thursday issued a fresh warning on the potential exploitation of a recent critical-severity vulnerability in Confluence Data Center and Confluence…
The US Securities and Exchange Commission (SEC) has announced charges against SolarWinds and its chief information security officer (CISO) for allegedly misleading investors about cybersecurity…
