Microsoft Warns of Critical Bugs Being Exploited in the Wild
The world’s largest software maker Microsoft on Tuesday released patches with cover for at least 59 documented security vulnerabilities, including a pair of critical-severity zero-days…
Category: SecurityWeek
Protected Virtual Machines Exposed to New ‘CacheWarp’ AMD CPU Attack
A team of researchers has disclosed the details of a new attack method affecting a security feature present in AMD processors, demonstrating the risk it…
Adobe Patch Tuesday: Critical Bugs in Acrobat, Reader, ColdFusion
Software maker Adobe on Tuesday rolled out a massive batch of security fixes to cover critical-severity flaws in its Acrobat and Reader, ColdFusion, inDesign, inCopy…
Zip Raises $7.7 Million to Expand SMB Cybersecurity Business
New York City and Washington DC-based startup Zip Security announced a $7.7 million financing round led by General Catalyst, co-led by Human Capital, and with…
UK Cybersecurity Center Says ‘Deepfakes’ and Other AI Tools Pose a Threat to the Next Election
Britain’s cybersecurity agency said Tuesday that artificial intelligence poses a threat to the country’s next national election, and cyberattacks by hostile countries and their proxies…
Top 10 API Security Threats for Q3 2023
The two primary takeaways from a new Q3 ‘API Threatstats’ report are: firstly, the number of API vulnerabilities is growing rapidly; and secondly, because of…
ICS Patch Tuesday: 90 Vulnerabilities Addressed by Siemens and Schneider Electric
Siemens and Schneider Electric’s Patch Tuesday advisories for November 2023 address roughly 90 vulnerabilities affecting their products. Siemens Siemens has released 14 new advisories to…
Radiant Snags $15 Million for AI-Powered SOC Technology
Radiant Security, a San Francisco startup with ambitious plans to modernize SOC (security operations center) technology with AI co-pilots, has attracted $15 million in new…
MySQL Servers, Docker Hosts Infected With DDoS Malware
Attackers are targeting MySQL servers and Docker hosts to plant malware capable of launching distributed denial-of-service (DDoS) attacks, according to a warning from researchers at…
Royal Ransomware Possibly Rebranding After Targeting 350 Organizations Worldwide
The Royal ransomware gang has targeted at least 350 organizations worldwide, with their ransom demands exceeding $275 million, and the cybercriminals may be preparing to…
Google Suing Cybercriminals Who Delivered Malware via Fake Bard Downloads
Google announced on Monday that it’s taking legal action against cybercriminals who delivered malware through websites that told users they could download Bard, the tech…
Hacker Conversations: Chris Wysopal, AKA Weld Pond
Chris Wysopal is the founder and CTO of Veracode, a firm focused on ensuring the development of secure code. Two decades ago, he was better…