Atlassian Patches Remote Code Execution Vulnerabilities in Confluence, Bamboo
Atlassian has released patches for two remote code execution (RCE) vulnerabilities in Confluence Data Center and Server and another in Bamboo Data Center. The most…
Category: SecurityWeek
Perimeter81 Vulnerability Disclosed After Botched Disclosure Process
Network security company Perimeter81 apparently needs to improve its responsible disclosure process for vulnerabilities found in its products. Cybersecurity researcher Erhad Husovic published a blog…
Industrial Organizations in Eastern Europe Targeted by Chinese Cyberspies
A China-linked cyberspy group appears to be behind a campaign targeting industrial organizations in Eastern Europe, cybersecurity firm Kaspersky reported last week. The attacks have…
Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails
Researchers at cloud security startup Wiz have an urgent warning for organizations running Microsoft’s M365 platform: That stolen Microsoft Azure AD enterprise signing key gave…
Russia Seeks 18 Years in Jail for Founder of Cybersecurity Firm
A Russian prosecutor on Friday requested an 18-year prison sentence for Ilya Sachkov, founder of one of the country’s topcybersecurity firms, on treason charges. Sachkov,…
In Other News: Military Emails Leaked, Google Restricts Internet Access, Chinese Spyware
SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a…
Google Creates Red Team to Test Attacks Against AI Systems
Google has created a red team that focuses on artificial intelligence (AI) systems and it has published a report providing an overview of common types…
Tampa General Hospital Says Patient Information Stolen in Ransomware Attack
Tampa General Hospital this week started informing patients that their personal information was compromised in a ransomware attack. Approximately 1.2 million individuals are reportedly impacted.…
OpenMeetings Flaws Allow Hackers to Hijack Instances, Execute Code on Servers
Three vulnerabilities in Apache OpenMeetings potentially expose organizations to remote code execution attacks, cybersecurity firm Sonar warns. A web conferencing application, OpenMeetings is used for…
VirusTotal Provides Clarifications on Data Leak Affecting Premium Accounts
VirusTotal on Friday provided clarifications on the recent data leak that resulted in the exposure of information on 5,600 of the threat analysis service’s customers.…
Tech Titans Promise Watermarks to Expose AI Creations
The White House said Friday that OpenAI and others in the artificial intelligence race have committed to making their technology safer with features such as watermarks…
GitHub Warns of North Korean Social Engineering Attacks Targeting Tech Firm Employees
A North Korean threat actor has been observed targeting employees at technology firms in a new low-volume social engineering campaign, Microsoft-owned code hosting platform GitHub…