Security Week

Noteworthy stories that might have slipped under the radar: 4chan hacked, auto-reboot security feature coming to Android, Iranian administrator of Nemesis charged in US.

The post In Other News: 4chan Hacked, Android Auto-Reboot, Nemesis Admin Charged appeared first on SecurityWeek.

Data protection firm Cy4Data Labs has raised $10 million in a Series A funding round led by Pelion Venture Partners.

The post Cy4Data Labs Raises $10 Million to Secure Data in Use appeared first on SecurityWeek.

Legends International says the personal information of employees and customers was compromised as a result of a cyberattack.

The post Events Giant Legends International Hacked appeared first on SecurityWeek.

Ahold Delhaize has confirmed that data was stolen from its systems in November 2024 after a ransomware group claimed the attack.

The post Ahold Delhaize Confirms Data Stolen in Ransomware Attack appeared first on SecurityWeek.

A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions.

The post Fresh Windows NTLM Vulnerability Exploited in Attacks appeared first on SecurityWeek.

Minh Phuong Ngoc Vong pleaded guilty to defrauding US companies of roughly $1 million in a fake IT worker scheme.

The post Man Helped Chinese Nationals Get Jobs Involving Sensitive US Government Projects appeared first on SecurityWeek.

While the Security Posture Management buzz is real, its long-term viability depends on whether it can deliver measurable outcomes without adding more complexity.

The post Demystifying Security Posture Management appeared first on SecurityWeek.

Atlassian and Cisco have released patches for multiple high-severity vulnerabilities, including remote code execution bugs.

The post Vulnerabilities Patched in Atlassian, Cisco Products appeared first on SecurityWeek.

Servers exposed to complete takeover due to CVE-2025-32433, an unauthenticated remote code execution flaw in Erlang/OTP SSH.

The post Critical Erlang/OTP SSH Flaw Exposes Many Devices to Remote Hacking appeared first on SecurityWeek.

Our collective voices and one community will provide the intelligence we need to safeguard our businesses in today’s modern digital environment.

The post Why ‘One Community’ Resonates in Cybersecurity appeared first on SecurityWeek.

CISA is making recommendations for organizations and users in light of the recent Oracle legacy cloud environment hack.

The post CISA Issues Guidance After Oracle Cloud Hack appeared first on SecurityWeek.

The Chinese state-sponsored group Mustang Panda has used new and updated malicious tools in a recent attack.

The post Chinese APT Mustang Panda Updates, Expands Arsenal appeared first on SecurityWeek.

A SonicWall SMA 100 series vulnerability patched in 2021, which went unnoticed at the time of patching, is being exploited in the wild.

The post SonicWall Flags Old Vulnerability as Actively Exploited appeared first on SecurityWeek.

Windows versions of the BrickStorm backdoor that the Chinese APT used in the MITRE hack last year have been active for years.

The post MITRE Hackers’ Backdoor Has Targeted Windows for Years appeared first on SecurityWeek.

Chris Krebs has resigned from SentinelOne after security clearance withdrawn and an order to review CISA’s conduct under his leadership.

The post Krebs Exits SentinelOne After Security Clearance Pulled appeared first on SecurityWeek.

The vulnerabilities are described as code execution and mitigation bypass issues that affect Apple’s iOS, iPadOS and macOS platforms.

The post Apple Quashes Two Zero-Days With iOS, MacOS Patches appeared first on SecurityWeek.

The US government's cybersecurity agency CISA has “executed the option period on the contract” to keep the vulnerability catalog operational.

The post MITRE CVE Program Gets Last-Hour Funding Reprieve appeared first on SecurityWeek.

Top-ranked mobile apps found using hardcoded keys and exposed cloud buckets.

The post Many Mobile Apps Fail Basic Security—Posing Serious Risks to Enterprises appeared first on SecurityWeek.

Shield Capital leads a $9 million seed-stage funding round for Israeli startup building technologies for AI security and privacy guardrails.

The post Pillar Security Banks $9M for AI Security Guardrails appeared first on SecurityWeek.

The Rhysida ransomware gang claims to have stolen 2.5 Tb of files from the Oregon Department of Environmental Quality.

The post Ransomware Group Claims Hacking of Oregon Regulator After Data Breach Denial appeared first on SecurityWeek.