Europe is Cracking Down on Big Tech. This Is What Will Change When You Sign On
Starting Friday, Europeans will see their online life change. People in the 27-nation European Union can alter some of what shows up when they search,…
Category: SecurityWeek
North Korean APT Hacks Internet Infrastructure Provider via ManageEngine Flaw
The North Korea-linked advanced persistent threat (APT) actor Lazarus Group has been observed exploiting a Zoho ManageEngine vulnerability to compromise an internet backbone infrastructure provider…
Cypago Raises $13 Million for GRC Automation Platform
Israeli startup Cypago on Thursday announced that it has raised $13 million in a funding round led by Entrée Capital, Axon Ventures, and Jump Capital,…
Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies
Congresswoman Nancy Mace (R-SC) this week introduced a bill that would require federal contractors to implement a Vulnerability Disclosure Policy (VDP). The proposed legislation, named…
Google Workspace Introduces New AI-Powered Security Controls
Google on Thursday introduced new AI-powered security controls for its Workspace customers, targeting zero trust, digital sovereignty, and threat defense. The new AI-powered zero trust…
Nearly 1,000 Organizations, 60 Million Individuals Impacted by MOVEit Hack
Nearly 1,000 organizations and 60 million individuals are reportedly impacted by the recent MOVEit campaign conducted by the Russian-speaking Cl0p ransomware group. It’s worth noting…
Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint
Threat hunters at Microsoft have caught a Chinese government-backed APT actor hacking into organizations in Taiwan with minimal use of malware and maintaining stealthy persistence…
University of Minnesota Confirms Data Breach, Says Ransomware Not Involved
The University of Minnesota has confirmed that a threat actor has exfiltrated data from its systems, but says no malware infection was identified. The confirmation…
Mysterious Malware Uses Wi-Fi Scanning to Get Location of Infected Device
Researchers at Secureworks have come across a mysterious piece of malware that scans for nearby Wi-Fi access points in an effort to obtain the location…
Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks
Cisco on Wednesday announced patches for six vulnerabilities in its products, including three high-severity bugs in NX-OS and FXOS software that could be exploited to…
FBI: Patches for Recent Barracuda ESG Zero-Day Ineffective
The Federal Bureau of Investigation says that the patches released for a recent Barracuda Email Security Gateway (ESG) vulnerability were not effective, advising organizations to…
Rockwell ThinManager Vulnerabilities Could Expose Industrial HMIs to Attacks
Vulnerabilities discovered by researchers in Rockwell Automation’s ThinManager ThinServer product could be exploited in attacks aimed at industrial control systems (ICS). Researchers at cybersecurity firm…