Synqly Joins Race to Fix Security, Infrastructure Product Integrations
Synqly, a Silicon Valley startup with ambitious plans to fix the way security and infrastructure products are integrated, announced its debut Tuesday with an early…
Category: SecurityWeek
Critical TorchServe Flaws Could Expose AI Infrastructure of Major Companies
A series of critical vulnerabilities impacting a tool called TorchServe could allow threat actors to take complete control of servers that are part of the…
Companies Address Impact of Exploited Libwebp Vulnerability
Companies have been releasing advisories addressing the impact of an actively exploited Libwebp vulnerability tracked as CVE-2023-4863 and CVE-2023-5129 on their products. The two CVEs…
Dozens of Malicious NPM Packages Steal User, System Data
Fortinet’s security researchers have identified multiple malicious NPM packages containing obfuscated scripts designed to harvest a trove of information from victims’ systems. On Monday, Fortinet…
US Executives Targeted in Phishing Attacks Exploiting Flaw in Indeed Job Platform
A recent phishing campaign targeting executives in senior roles has been exploiting an open redirection vulnerability in the Indeed website, cybersecurity firm Menlo Security warns.…
Actor Tom Hanks Warns of Ad With AI Imposter
Actor Tom Hanks and CBS talk show co-host Gayle King on Monday were warning fans about ads featuring imposters generated by artificial intelligence. “Beware,” Hanks…
Network, Meet Cloud; Cloud, Meet Network
The widely believed notion that the network and the cloud are two different and distinct entities is not true. While it may have been so…
Android’s October 2023 Security Updates Patch Two Exploited Vulnerabilities
Google on Monday announced the release of patches for 51 vulnerabilities as part of the October 2023 security updates for Android, including fixes for two…
Motel One Discloses Ransomware Attack Impacting Customer Data
Budget hotel chain Motel One Group on Monday confirmed that some customer information and credit card data was stolen in a recent ransomware attack. The…
Live Exploitation Underscores Urgency to Patch Critical WS-FTP Server Flaw
Just days after the release of patches for a critical pre-authentication flaw in Progress Software’s WS_FTP server product, security experts have detected active exploitation in…
Number of Internet-Exposed ICS Drops Below 100,000: Report
The number of internet-exposed industrial control systems (ICS) has continued to decrease over the past years, dropping below 100,000 as of June 2023, according to…
European Telecommunications Standards Institute Discloses Data Breach
The European Telecommunications Standards Institute (ETSI) has disclosed a data breach following a cyberattack on its member’s portal. Established in 1988, ETSI is an independent,…