Category: SecurityWeek

Patch Tuesday: Critical Flaws in Adobe Commerce Software
15
Jun
2023

CISA, NSA Share Guidance on Hardening Baseboard Management Controllers

The Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have published new guidance to help organizations…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
15
Jun
2023

Content Moderation Tech Startup Trust Lab Snags $15M Investment

Trust Lab, a Silicon Valley startup founded by Google’s former head of Trust and Safety, has bagged $15 million in…

Shift5 Logo
15
Jun
2023

OT Security Firm Shift5 Adds $33 Million in Funding

Arlington, VA-based OT security firm Shift5 has raised an additional $33 million in its Series B financing. $50 million was…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
15
Jun
2023

XSS Vulnerabilities in Azure Led to Unauthorized Access to User Sessions

Two cross-site scripting (XSS) vulnerabilities in Azure Bastion and Azure Container Registry (ACR) could have led to unauthorized access to…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
15
Jun
2023

US Organizations Paid $91 Million to LockBit Ransomware Gang

The LockBit ransomware gang has launched roughly 1,700 attacks in the United States and received approximately $91 million in ransom…

Barracuda zero day exploited by China
15
Jun
2023

Barracuda Zero-Day Attacks Attributed to Chinese Cyberespionage Group

The recent attacks exploiting a zero-day vulnerability in a Barracuda Networks email security appliance have been attributed by Mandiant to…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
15
Jun
2023

SquareX Launches Bug Bounty Program for Browser Security Product

Hot on the heels of a $6 million seed funding round, cybersecurity startup SquareX today announced a six-week bug bounty…

Fake Security Researcher Accounts Pushing Malware Disguised as Zero-Day Exploits
15
Jun
2023

Fake Security Researcher Accounts Pushing Malware Disguised as Zero-Day Exploits

Exploit and vulnerability intelligence provider VulnCheck has issued a warning over fake security researcher accounts distributing malware disguised as zero-day…

Creating at mature threat intelligence program
15
Jun
2023

Four Things to Consider as You Mature Your Threat Intel Program

When ESG recently asked security professionals to identify the attributes of a mature threat intelligence program, the top response was…

Future of AI
15
Jun
2023

How Europe is Leading the World in the Push to Regulate AI

Lawmakers in Europe signed off Wednesday on the world’s first set of comprehensive rules for artificial intelligence, clearing a key…

Russian Cyberattacks
14
Jun
2023

Microsoft Outs New Russian APT Linked to Wiper Attacks in Ukraine

Security researchers at Microsoft are publicly outing a new APT group linked to Russia’s General Staff Main Intelligence Directorate (GRU),…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
14
Jun
2023

CISA Instructs Federal Agencies to Secure Internet-Exposed Devices

The US Cybersecurity and Infrastructure Security Agency (CISA) is requiring federal agencies to secure the network management interfaces of certain…