Category: SecurityWeek

Chrome Vulerabilities
21
Jun
2023

Chrome and Its Vulnerabilities – Is the Web Browser Safe to Use?

Like all major applications, Google’s Chrome suffers from vulnerabilities. During 2022, SecurityWeek reported on 456 vulnerabilities (averaging 38 per month),…

SBOM Mandates
21
Jun
2023

Biden Discusses Risks and Promises of Artificial Intelligence With Tech Leaders in San Francisco

President Joe Biden convened a group of technology leaders on Tuesday to debate what he called the “risks and enormous…

VMWare
20
Jun
2023

VMware Confirms Live Exploits Hitting Just-Patched Security Flaw

Less than two weeks after shipping urgent patches to cover security defects in its Aria Operations for Networks product, VMware…

Storm-1359 DDoS attacks on Microsoft
20
Jun
2023

Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps

Researchers at security startup Descope have discovered a major misconfiguration in Microsoft Azure AD OAuth applications and warned that any…

Russian Cyberattacks
20
Jun
2023

Russian APT Group Caught Hacking Roundcube Email Servers

A prolific APT group linked to the Russian government has been caught exploiting security flaws in the open-source Roundcube webmail…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
20
Jun
2023

Norton Parent Says Employee Data Stolen in MOVEit Ransomware Attack

Gen Digital (NASDAQ: GEN), the company behind known cybersecurity brands such as Avast, Avira, AVG, Norton, and LifeLock, has confirmed…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
20
Jun
2023

New ‘RDStealer’ Malware Targets RDP Connections

A state-sponsored espionage campaign is leveraging new custom malware to monitor incoming remote desktop protocol (RDP) connections and infect connecting…

OT:Icefall
20
Jun
2023

OT:Icefall: Vulnerabilities Identified in Wago Controllers

Forescout Technologies has disclosed the details of three vulnerabilities impacting operational technology (OT) products from Wago and Schneider Electric. The…

SEC Cybersecurity
20
Jun
2023

Fulfilling Expected SEC Requirements for Cybersecurity Expertise at Board Level

The U.S. Securities and Exchange Commission (SEC) is expected to introduce a rule requiring demonstration of cybersecurity expertise at the…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
20
Jun
2023

Australian Government Says Its Data Was Stolen in Law Firm Ransomware Attack

The Office of the Australian Information Commissioner (OAIC) says some of its files were stolen in a ransomware attack on…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
19
Jun
2023

Asus Patches Highly Critical WiFi Router Flaws

Taiwanese computer hardware manufacturer Asus on Monday shipped urgent firmware updates to address vulnerabilities in its WiFi router product lines…

External Secrets Manager
19
Jun
2023

Akeyless Launches SaaS-based External Secrets Manager

Secrets are fundamental to cybersecurity. They comprise the secret data that allows individual authorization and access to or between systems….