Category: SecurityWeek

Sophos CVE-2023-1671 exploited
17
Nov
2023

CISA Warns of Attacks Exploiting Sophos Web Appliance Vulnerability

The US cybersecurity agency CISA added Sophos, Oracle and Microsoft product flaws to its Known Exploited Vulnerabilities (KEV) catalog on…

CitrixBleed Vulnerability Exploitation Suspected in Toyota Ransomware Attack
17
Nov
2023

CitrixBleed Vulnerability Exploitation Suspected in Toyota Ransomware Attack

Toyota Financial Services Europe & Africa this week confirmed being targeted in a cyberattack, which appears to have been conducted…

Titan security key
16
Nov
2023

Google Adds Passkey Support to New Titan Security Key 

Google this week launched a new version of its Titan security key, which adds support for passkeys. The Titan security…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
16
Nov
2023

Biden Campaign Looking for CISO

The Biden for President campaign is searching for a Chief Information Security Officer (CISO) to lead its IT and security…

Government emails hacked via Zimbra zero-day
16
Nov
2023

Zimbra Zero-Day Exploited to Hack Government Emails

Google’s Threat Analysis Group (TAG) revealed on Thursday that a Zimbra Collaboration Suite zero-day was exploited earlier this year to…

AUKUS targeted by Chinese hackers
16
Nov
2023

State-Sponsored Online Spies Likely to Target Australian Submarine Program, Spy Agency Says

Australia’s cooperation with the United States and Britain to develop an Australian fleet of submarines powered by U.S. nuclear technology…

Evaluating Bot Detection Solutions
16
Nov
2023

Bad Bots Account for 73% of Internet Traffic: Analysis

Arkose Labs has analyzed and reported on tens of billions of bot attacks from January through September 2023, collected via…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
16
Nov
2023

Administrator of Darkode Hacking Forum Sentenced to Prison

The US Justice Department announced on Wednesday that a man who admitted being an administrator of a now-defunct cybercrime forum…

Challenges of threat intel sharing
16
Nov
2023

Threat Intel: To Share or Not to Share is Not the Question

From its inception, the discipline of cyber threat intelligence has been about sharing. Informing cybersecurity teams, tools and best practices…

Ransomware Attack SEC complaint
16
Nov
2023

Ransomware Group Files SEC Complaint Over Victim’s Failure to Disclose Data Breach

A notorious ransomware group has filed a complaint with the US Securities and Exchange Commission (SEC) over the failure of…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
15
Nov
2023

Microsoft Patches Sensitive Information Disclosure Vulnerability in Azure CLI

Microsoft on Tuesday released patches and guidance for addressing a high-severity vulnerability in Azure Command-Line Interface (CLI) that could result…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
15
Nov
2023

Data Security Firm ALTR Banks $25M Series C 

Late-stage data security startup ALTR on Wednesday announced the closing of a $25 million funding round to continue building and…