Category: SecurityWeek

Security Firm Finds Over 130k Internet-Exposed Photovoltaic Diagnostics Systems
07
Jul
2023

Security Firm Finds Over 130k Internet-Exposed Photovoltaic Diagnostics Systems

More than 130,000 photovoltaic monitoring and diagnostic solutions are accessible from the public internet, which could make them susceptible to…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
07
Jul
2023

OWASP SwSec 5D Tool Provides SDLC Maturity Ratings, Aids Software Supply Chain

The Open Source Foundation for Application Security (OWASP) announced a five-dimensional secure software development maturity reference framework (SwSec 5D) in…

MOVEit MFT vulnerability exploited
07
Jul
2023

After Zero-Day Attacks, MOVEit Turns to Security Service Packs

Faced with a barrage of ransomware attacks hitting zero-days in its MOVEit product line, Progress Software late Thursday announced plans…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
07
Jul
2023

In Other News: Healthcare Product Flaws, Free Email Security Testing, New Attack Techniques

SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
07
Jul
2023

Former Contractor Employee Charged for Hacking California Water Treatment Facility

A 53-year-old man from Tracy, California, has been charged for allegedly hacking into the systems of a water treatment facility…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
07
Jul
2023

Iranian Cyberspies Target US-Based Think Tank With New macOS Malware

In a recent attack against a US-based think tank, Iranian cyberespionage group Charming Kitten was observed porting a PowerShell backdoor…

Vulnerabilities in PiiGAB Product Could Expose Industrial Organizations to Attacks
07
Jul
2023

Vulnerabilities in PiiGAB Product Could Expose Industrial Organizations to Attacks

Potentially serious vulnerabilities discovered by researchers in a PiiGAB product could expose industrial organizations to remote hacker attacks. PiiGAB is…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
07
Jul
2023

Two Apps Hosted on Google Play Caught Sending User Data to Chinese Servers

Two file management applications hosted on Google Play, with more than 1.5 million combined downloads, were caught sending user data…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
06
Jul
2023

CISA, FBI Warning: Truebot Hackers Exploiting Netwrix Auditor Flaw

The U.S. government’s cybersecurity agency CISA on Thursday warned hackers linked to the Truebot malware operation are exploiting a known…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
06
Jul
2023

Now’s the Time for a Pragmatic Approach to New Technology Adoption

To say there’s been a lot of hype around AI lately would be an understatement. We’ve all seen headlines touting…

Exploited Android vulnerabilities patched
06
Jul
2023

Android Security Updates Patch 3 Exploited Vulnerabilities

Security updates that Google released this week for Android resolve 43 vulnerabilities, including three that have been exploited in attacks….

Patch Tuesday: Critical Flaws in Adobe Commerce Software
06
Jul
2023

JumpCloud Says All API Keys Invalidated to Protect Customers

Device, identity and access management solutions provider JumpCloud has reset customer API keys in response to an “ongoing incident”. JumpCloud…