DPI: Still Effective for the Modern SOC?
There has been an ongoing debate in the security industry over the last decade or so about whether or not deep packet inspection (DPI) is…
Category: SecurityWeek
Malicious NuGet Packages Abuse MSBuild Integrations for Code Execution
As part of an ongoing and coordinated campaign, threat actors have been continuously publishing malicious NuGet packages with hidden code execution capabilities, threat detection firm…
SIEM and Log Management Provider Graylog Raises $39 Million
Security information and event management (SIEM) and log management provider Graylog on Tuesday announced that it has raised $39 million in funding, which brings the…
Cutting-Edge AI Raises Fears About Risks to Humanity. Are Tech and Political Leaders Doing Enough?
Chatbots like ChatGPT wowed the world with their ability to write speeches, plan vacations or hold a conversation as good as or arguably even better…
Former British Cyberespionage Agency Employee Gets Life in Prison for Stabbing an American Spy
A former British cyberespionage employee who had become angry and resentful toward his agency’s work was sentenced Monday to life in prison for attempted murder…
Cybersecurity Leaders Spooked by SEC Lawsuit Against SolarWinds CISO
In a development sparking chatter and debate through the cybersecurity world, the lawsuit filed by the the U.S. Securities and Exchange Commission (SEC) against the…
Palo Alto Networks to Acquire Cloud Security Start-Up Dig Security
Palo Alto Networks (NASDAQ: PANW) announced on Tuesday that it has entered into a definitive agreement to acquire Dig Security, a Tel Aviv, Israel-based provider…
Atlassian CISO Urges Quick Action to Protect Confluence Instances From Critical Vulnerability
Enterprise software maker Atlassian on Monday urged all Confluence Data Center and Server customers to patch their instances against a critical-severity vulnerability that can be…
IAM Credentials in Public GitHub Repositories Harvested in Minutes
A threat actor is harvesting identity and access management (IAM) credentials from public GitHub repositories within five minutes of exposure, cybersecurity firm Palo Alto Networks…
Attackers Exploiting Critical F5 BIG-IP Vulnerability
Exploitation of a recently patched critical vulnerability in F5’s BIG-IP product started less than five days after public disclosure and proof-of-concept (PoC) exploit code was…
Extending ZTNA to Protect Against Insider Threats
Cyberthreats are growing in their pervasiveness, stealth, and severity, and the potential consequences of a breach are more severe than ever before. With increasing skepticism…
SEC Charges SolarWinds and Its CISO With Fraud and Cybersecurity Failures
In a surprising development on Monday that is spooking the cybersecurity community, the Securities and Exchange Commission (SEC) has filed charges against SolarWinds and its…