Cybersecurity News, Insights and Analysis | SecurityWeek
WEBEvent: ICS Cybersecurity Conference. Oct. 21-24, 2024. The leading industrial cybersecurity conference for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity. Register.
Microsoft Warns of Six Windows Zero-Days Being Actively Exploited
WEBAugust 13, 2024. Microsoft warned Tuesday of six actively exploited Windows security defects, highlighting ongoing struggles with zero-day attacks across its flagship operating system. Redmond’s security response team pushed out documentation for almost 90 vulnerabilities across Windows and OS components and raised eyebrows when it …
News - SecurityWeek
WEB4 days ago · US Gov Removing Four-Year-Degree Requirements for Cyber Jobs. The US government will remove "unnecessary degree requirements" in favor of skills-based hiring to help fill 500,000 open cybersecurity jobs. September 6, 2024.
Application Security Archives - SecurityWeek
WEBCritical CocoaPods Flaws Exposed Many iOS, macOS Apps to Supply Chain Attacks. EVA Information Security has shared details on three CocoaPods vulnerabilities impacting millions of macOS and iOS applications. Ionut Arghire July 2, 2024.
Why LinkedIn Developed Its Own AI-Powered Security Platform
WEBAug 21, 2024 · An inside look at how LinkedIn developed an internal AI-assisted vulnerability management system to protect its massive infrastructure and user base. LinkedIn has responsibility for a billion global users across a massive hardware estate at a time of rising cybersecurity threats and vulnerabilities. It …
Malware & Threats Archives - SecurityWeek
WEBIranian Hackers Use New Tickler Malware for Intelligence Gathering on Critical Infrastructure. The Iran-linked state-sponsored hacker group tracked as Peach Sandstorm has started using a new backdoor in attacks aimed at the US and UAE. Eduard Kovacs August 29, 2024.
MITRE Publishes 2022 List of 25 Most Dangerous Vulnerabilities
WEBJun 29, 2022 · Out-of-bounds write and cross-site scripting (XSS) remain the two most dangerous vulnerabilities. Some of the most significant changes include race conditions moving from 33 to 22, code injection from 28 to 25, and uncontrolled resource consumption from 27 to 23 — these are also the new types of vulnerabilities that made the 2022 list.
Data Breaches Archives - SecurityWeek
WEBArden Claims Service Reports Data Breach, 139,000 Affected. Personal information for about 139,000 individuals was stolen in October 2023 from class action settlement administrator Arden Claims Service. Ionut Arghire August 21, 2024.
Secure Data Sharing Company Kiteworks Raises $456 Million
WEBEduard Kovacs. August 14, 2024. Secure data sharing solutions provider Kiteworks on Wednesday announced raising $456 million in growth equity investment from Insight Partners and Sixth Street Growth. The funding, a partial liquidity event, is expected to help strengthen Kiteworks’ market position in secure data transfer and collaboration.
Cybercrime Archives - SecurityWeek
WEBFrom Cybercrime to Terrorism, FBI Director Says America Faces Many Elevated Threats ‘All at Once’. Wray declined to talk about any specific investigation or threat but said investigations into cyberattacks, including against election infrastructure, candidates or campaigns, require help... Associated Press August 23, 2024.