CISO Pay Increases Are Slowing – a Look Behind the Figures
CISO compensation levels are growing more slowly than recent years. Security budget increases are even more deflated this year. The details are provided in a…
Category: SecurityWeek
LinkedIn Smart Links Abused in Phishing Campaign Targeting Microsoft Accounts
A recently identified phishing campaign is relying on LinkedIn smart links to bypass email defenses and deliver malicious lures into Microsoft users’ inboxes, email security…
Unpatched Vulnerabilities Expose Yifan Industrial Routers to Attacks
Industrial routers made by Chinese company Yifan are affected by several critical vulnerabilities that can expose organizations to attacks, Cisco’s Talos threat intelligence and research…
Simpson Manufacturing Takes Systems Offline Following Cyberattack
Engineering and manufacturing firm Simpson Manufacturing says it has taken some of its IT systems offline following a cyberattack this week. Headquartered in Pleasanton, California,…
SYN Ventures Announces $75 Million Seed Fund for US Cybersecurity Firms
Venture capital firm SYN Ventures announced this week the first closing of a $75 million cybersecurity seed fund, which the company describes as “the largest…
Critical SOCKS5 Vulnerability in cURL Puts Enterprise Systems at Risk
The maintainers of the cURL data transfer project on Wednesday rolled out patches for a severe memory corruption vulnerability that exposes millions of enterprise OSes,…
Payment Card Data Stolen in Air Europa Hack
Air Europa, one of Spain’s largest airlines, is urging some customers to cancel their payment cards after the information may have been compromised as a…
Citrix Patches Critical NetScaler ADC, Gateway Vulnerability
Citrix on Tuesday announced patches for a critical-several vulnerability impacting multiple versions of NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. Tracked as CVE-2023-4966 (CVSS…
US Government Releases Security Guidance for Open Source Software in OT, ICS
Several US government agencies have teamed up to create new cybersecurity guidance for the use of open source software (OSS) in operational technology (OT). Designed…
Applying AI to API Security
It is hard to go anywhere in the security profession these days without the topic of artificial intelligence (AI) coming up. Indeed, AI is a popular…
Chrome 118 Patches 20 Vulnerabilities
Google on Tuesday announced the release of Chrome 118 to the stable channel with fixes for 20 vulnerabilities, including 14 reported by external researchers. The…
Organizations Respond to HTTP/2 Zero-Day Exploited for DDoS Attacks
Major tech companies and other organizations have rushed to respond to the newly disclosed HTTP/2 zero-day vulnerability that has been exploited to launch the largest…