Category: SecurityWeek

Patch Tuesday: Critical Flaws in Adobe Commerce Software
02
Aug
2023

Google AMP Abused in Phishing Attacks Aimed at Enterprise Users

Threat actors have been observed abusing Google Accelerated Mobile Pages (AMP) in phishing campaigns, as a new tactic to evade…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
02
Aug
2023

Firefox 116 Patches High-Severity Vulnerabilities

Mozilla on Tuesday announced the release of Firefox 116, Firefox ESR 115.1, and Firefox ESR 102.14, which include patches for…

Ivanti zero-day CVE-2023-35078 exploited
02
Aug
2023

Ivanti Zero-Day Exploited by APT Since at Least April in Norwegian Government Attack

The recently patched zero-day vulnerability affecting Ivanti’s Endpoint Manager Mobile (EPMM) product has been exploited by an advanced persistent threat…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Aug
2023

Forgepoint Capital Places $15M Series A Bet on Converge Insurance

Venture capital outfit Forgepoint Capital has placed another bet in the cyber-insurance sector, leading a $15 million funding round for…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Aug
2023

Forgepoint Capital Places $20M Series A Bet on Converge Insurance

Venture capital outfit Forgepoint Capital has placed another bet in the cyber-insurance sector, leading a $15 million funding round for…

Iranian cyberattacks
01
Aug
2023

Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups

Researchers at cybersecurity startup Halcyon has unmasked an Iranian-run company providing command-and-control services to more than 20 hacking groups, including…

Collide+Power CPU leak attack
01
Aug
2023

Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack

A new side-channel attack method that can lead to data leakage works against nearly any modern CPU, but we’re unlikely…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Aug
2023

Nile Raises $175 Million for Secure NaaS Solutions

Network-as-a-service (NaaS) solutions provider Nile today announced that it has raised $175 million in Series C funding, which brings the…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Aug
2023

Socket Scores $20M as Investors Bet on Software Supply Chain Security Startups

Socket, an early-stage startup tackling software supply chain security, has snagged $20 million in new financing as investors continue to…

Silk Security Emerges from Stealth With $12.5 Million Seed Funding
01
Aug
2023

Silk Security Emerges from Stealth With $12.5 Million Seed Funding

New York based Silk Security has raised $12.5 million in a seed funding round led by Insight Partners and Hetz…

BloodHound
01
Aug
2023

SpecterOps Updates BloodHound Active Directory Mapping Tool

BloodHound is SpecterOps’ graph-based map of Active Directory relationships used by external pentesters (and malicious attackers), and internal users to…

Hacker Conversations: Interview with Daniel Kelley
01
Aug
2023

Hacker Conversations: Youssef Sammouda, Bug Bounty Hunter

Youssef Sammouda is a Tunisian security researcher who focuses on bug bounty programs. He describes himself as, “Vulnerability researcher with…