Category: SecurityWeek

Code Signing Software Supply Chain
11
Jul
2023

Verifying Software Integrity With Sigstore

Software Supply Chain: Part 3 As part of my software supply chain series, I want to move on to the…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
11
Jul
2023

Personal Information of 11 Million Patients Stolen in Data Breach at HCA Healthcare

HCA Healthcare on Monday announced that the personal information of roughly 11 million patients was stolen in a data breach….

Patch Tuesday: Critical Flaws in Adobe Commerce Software
11
Jul
2023

Russia-Linked RomCom Hackers Targeting NATO Summit Guests

As part of a recently identified cyber operation, a Russia-linked threat actor known as RomCom has been targeting entities supporting…

iOS Zero-Day Exploits
10
Jul
2023

Apple Ships Urgent iOS Patch for WebKit Zero-Day

Apple on Monday rolled out an urgent software update to its iOS and iPadOS mobile operating systems and warned that…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
10
Jul
2023

Exploit Code Published for Remote Root Flaw in VMware Logging Software

Virtualization technology giant VMware on Monday warned that exploit code has been publicly released for a pre-authentication remote code execution…

EU US Data Sharing Agreement
10
Jul
2023

Europe Signs Off on a New Privacy Pact That Allows People’s Data to Keep Flowing to US

The European Union signed off Monday on a new agreement over the privacy of people’s personal information that gets pinged…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
10
Jul
2023

TPG to Acquire Forcepoint’s Government Cybersecurity Business Unit

Private equity giant TPG on Monday announced plans to acquire Forcepoint’s Global Governments and Critical Infrastructure (G2CI) business unit in…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
10
Jul
2023

Critical Infrastructure Services Firm Ventia Takes Systems Offline Due to Cyberattack

Critical infrastructure services provider Ventia over the weekend announced that it has taken some of its systems offline to contain…

NATO Cybersecurity
10
Jul
2023

A Cybersecurity Wish List Ahead of NATO Summit

As tomorrow’s NATO Summit in Vilnius, Lithuania approaches, SecurityWeek questions what NATO should do about cybersecurity. The Russia/Ukraine conflict offers…

ICS Cybersecurity Conference
10
Jul
2023

Honeywell Boosting OT Cybersecurity Offering With Acquisition of SCADAfence

Industrial giant Honeywell wants to extend its operational technology (OT) cybersecurity portfolio with the acquisition of Tel Aviv, Israel-based OT…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
10
Jul
2023

PoC Exploit Published for Recent Ubiquiti EdgeRouter Vulnerability

A recently patched vulnerability in Ubiquiti EdgeRouter and AirCube devices could be exploited to execute arbitrary code, vulnerability reporting firm…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
10
Jul
2023

Critical Vulnerability Can Allow Takeover of Mastodon Servers

A critical vulnerability in the decentralized social networking platform Mastodon could be exploited to take over servers. The issue was…