Shockwaves from the Russian government's hack of Microsoft's corporate infrastructure continue to spread as the victim pool widens.

The post Microsoft Alerts More Customers to Email Theft in Expanding Midnight Blizzard Hack appeared first on SecurityWeek.

Incubated for two years by Ballistic Ventures, GetReal Labs has launched to combat manipulated content and deepfakes.

The post GetReal Labs Emerges From Stealth to Tackle Deepfakes appeared first on SecurityWeek.

Permissions management technology startup AuthZed has raised $12 million in a Series A funding round led by General Catalyst.

The post AuthZed Raises $12 Million for Permissions Management Technology appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: Korean ISP delivers malware to customers, Temu sued for allegedly spying on users, Microsoft patches a critical Dataverse vulnerability.

The post In Other News: Malware Delivered by ISP, Temu Spying, Critical Dataverse Vulnerability appeared first on SecurityWeek.

Microsoft has tricked several gen-AI models into providing forbidden information using a jailbreak technique named Skeleton Key.

The post Microsoft Details ‘Skeleton Key’ AI Jailbreak Technique appeared first on SecurityWeek.

Fortra has patched a critical-severity vulnerability in FileCatalyst Workflow leading to the creation of administrator accounts.

The post Fortra Patches Critical SQL Injection in FileCatalyst Workflow appeared first on SecurityWeek.

Ann & Robert H. Lurie Children’s Hospital of Chicago says the recent data breach caused by a ransomware attack impacts 791,000 people.

The post Chicago Children’s Hospital Says 791,000 Impacted by Ransomware Attack appeared first on SecurityWeek.

Namecheap shut down polyfill.io amid reports of malicious activity, but the Chinese owner claims it has good intentions.

The post Polyfill Domain Shut Down as Owner Disputes Accusations of Malicious Activity appeared first on SecurityWeek.

TeamViewer’s corporate network was hacked and some reports say the Russian group APT29 is behind the attack.

The post Russian APT Reportedly Behind New TeamViewer Hack appeared first on SecurityWeek.

The US Justice Department has announced charges against Amin Stigal for conducting wiper cyberattacks on Ukraine in 2022.

The post US Announces Charges, Reward for Russian National Behind Wiper Attacks on Ukraine appeared first on SecurityWeek.

Healthcare services provider Designed Receivable Solutions says the number of individuals affected by a recent data breach has increased to 585,000.

The post Designed Receivable Solutions Data Breach Impacts 585,000 People appeared first on SecurityWeek.

GitLab CE and EE updates resolve 14 vulnerabilities, including a critical- and three high-severity bugs.

The post GitLab Security Updates Patch 14 Vulnerabilities appeared first on SecurityWeek.

Most critical open source software contains code written in a memory unsafe language, US, Australian, and Canadian government agencies warn.

The post US, Allies Warn of Memory Unsafety Risks in Open Source Software appeared first on SecurityWeek.

Inside the Mind of a CISO 2024 is a survey of 209 security leaders to understand the thinking and operational methods and motivations of CISOs.

The post Inside the Mind of a CISO: Survey and Analysis appeared first on SecurityWeek.

Critical vulnerabilities have been found in an Emerson gas chromatograph and Claroty warns that attacks could have a serious impact.

The post Gas Chromatograph Hacking Could Have Serious Impact: Security Firm appeared first on SecurityWeek.

CISA on Wednesday warned that three older flaws in GeoServer, Linux kernel, and Roundcube webmail are exploited in the wild.

The post CISA Warns of Exploited GeoServer, Linux Kernel, and Roundcube Vulnerabilities appeared first on SecurityWeek.

The LockBit ransomware group claimed to have hacked the US Federal Reserve, but leaked data from an Arkansas-based bank.

The post Evolve Bank Data Leaked After LockBit’s ‘Federal Reserve Hack’  appeared first on SecurityWeek.

Aqua Security shows that code in repositories remains accessible even after being deleted or overwritten, continuing to leak secrets.

The post ‘Phantom’ Source Code Secrets Haunt Major Organizations appeared first on SecurityWeek.

WikiLeaks founder Julian Assange returned to Australia, hours after pleading guilty to obtaining and publishing U.S. military secrets.

The post WikiLeaks Founder Julian Assange Returns to Australia a Free Man After US Legal Battle Ends appeared first on SecurityWeek.

Google has announced new Chrome Enterprise Core features that should be very useful to IT and security teams.

The post Google Unveils New Chrome Enterprise Core Features for IT, Security Teams appeared first on SecurityWeek.

Google has disrupted over 175,000 YouTube and Blogger instances related to the Chinese influence operation Dragonbridge.

The post Google Disrupts More China-Linked Dragonbridge Influence Operations appeared first on SecurityWeek.

Freed from the shackles of always demanding a technical background, the CISO can concentrate on building a diverse team comprising multiple skills.

The post Gaining and Retaining Security Talent: A Cheat Sheet for CISOs appeared first on SecurityWeek.

Some expressed concern about a rise in hybrid attacks by Russia – including allegations of election interference, cyberattacks and sabotage.

The post The EU Targets Russia’s LNG Ghost Fleet With Sanctions as Concern Mounts About Hybrid Attacks appeared first on SecurityWeek.

The P2Pinfect worm targeting Redis servers has been updated with ransomware and cryptocurrency mining payloads.

The post P2Pinfect Worm Now Dropping Ransomware on Redis Servers appeared first on SecurityWeek.

More than 100,000 websites are affected by a supply chain attack injecting malware via a Polyfill domain.

The post Polyfill Supply Chain Attack Hits Over 100k Websites  appeared first on SecurityWeek.

Several vulnerabilities patched recently in Siemens Sicam products could be exploited in attacks aimed at the energy sector.

The post Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector appeared first on SecurityWeek.

Exploitation attempts targeting CVE-2024-5806, a critical MOVEit Transfer vulnerability patched recently, have started.

The post Exploitation Attempts Target New MOVEit Transfer Vulnerability appeared first on SecurityWeek.

The European Council has added six Russian hackers to the EU’s sanctions list for their cyberattacks against member states and Ukraine.

The post EU Sanctions Six Russian Hackers appeared first on SecurityWeek.

A Mirai-like botnet has started exploiting a critical-severity vulnerability in discontinued Zyxel NAS products.

The post Recent Zyxel NAS Vulnerability Exploited by Botnet appeared first on SecurityWeek.

Indonesia’s national data center has been compromised by a hacking group asking for a $8 million ransom that the government won’t pay.

The post Indonesia Says a Cyberattack Has Compromised Its Data Center but It Won’t Pay the $8 Million Ransom appeared first on SecurityWeek.

CoinStats says North Korean hackers drained $2 million in virtual assets from 1,590 cryptocurrency wallets.

The post Hackers Steal Over $2 Million in Cryptocurrency From CoinStats Wallets appeared first on SecurityWeek.

Five WordPress plugins were injected with malicious code that creates a new administrative account.

The post Several Plugins Compromised in WordPress Supply Chain Attack  appeared first on SecurityWeek.

Researcher shows how hackers could use social engineering to deliver ransomware and other malware to Meta’s Quest 3 VR headset.

The post Meta’s Virtual Reality Headset Vulnerable to Ransomware Attacks: Researcher appeared first on SecurityWeek.

Car dealerships in North America are still wrestling with major disruptions that started last week with cyberattacks on a company whose software is used widely in the auto retail sales sector.

The post Car Dealerships in North America Revert to Pens and Paper After Cyberattacks on Software Provider appeared first on SecurityWeek.

Employees of the Any.Run malware analysis service were recently targeted in a phishing attack that was part of a BEC campaign.

The post Malware Sandbox Any.Run Targeted in Phishing Attack appeared first on SecurityWeek.

Neiman Marcus has disclosed a data breach impacting 64,000 people just as a hacker announced the sale of customer data.

The post Neiman Marcus Data Breach Disclosed as Hacker Offers to Sell Stolen Information appeared first on SecurityWeek.

Google has released a Chrome security update to resolve four high-severity use-after-free vulnerabilities.

The post Chrome 126 Update Patches Memory Safety Bugs appeared first on SecurityWeek.

Assange will plead guilty to an Espionage Act charge of conspiring to unlawfully obtain and disseminate classified national defense information, the Justice Department said.

The post WikiLeaks Founder Julian Assange Will Plead Guilty in Deal With US and Return to Australia appeared first on SecurityWeek.

A suspected Chinese state-sponsored hacking group has stepped up its targeting of Taiwanese organizations, particularly those in sectors such as government, education, technology and diplomacy.

The post Chinese Hackers Have Stepped Up Attacks on Taiwanese Organizations, Cybersecurity Firm Says appeared first on SecurityWeek.

SecurityWeek’s AI Risk Summit + CISO Forum brings together business and government stakeholders to provide meaningful guidance on risk management and cybersecurity in the age of artificial intelligence.

The post Tech Leaders Gather This Week for AI Risk Summit + CISO Forum at the Ritz-Carlton, Half Moon Bay appeared first on SecurityWeek.

New attack named SnailLoad allows a remote attacker to infer websites and videos viewed by a user without direct access to network traffic.

The post New SnailLoad Attack Relies on Network Latency Variations to Infer User Activity appeared first on SecurityWeek.

The EFF has issued a warning over the use of automated license plate readers following the discovery of serious vulnerabilities. 

The post EFF Issues New Warning After Discovery of Automated License Plate Reader Vulnerabilities appeared first on SecurityWeek.

LivaNova USA says the personal and medical information of 130,000 individuals was compromised in an October 2023 data breach.

The post LivaNova USA Discloses Data Breach Impacting 130,000 Individuals appeared first on SecurityWeek.

The US has announced charges against four Vietnamese nationals for hacking businesses and causing $71 million in losses.

The post Vietnamese Members of FIN9 Hacking Group Charged in US appeared first on SecurityWeek.

The Los Angeles County Department of Health Services discloses a data breach caused by push notification spamming attack.

The post Push Notification Fatigue Leads to LA County Health Department Data Breach appeared first on SecurityWeek.

The US has imposed sanctions on 12 individuals who have leadership roles at Kaspersky in Russia and the UK.

The post US Sanctions 12 Kaspersky Executives  appeared first on SecurityWeek.

A hacker claims to have stolen the information of 30 million users from TEG subsidiary Ticketek.

The post Hacker Claims Theft of 30M User Records From Australia Ticketing Company TEG appeared first on SecurityWeek.

Japan’s space agency has suffered a series of cyberattacks, but sensitive information related to rockets and satellites was not affected.

The post Japan’s Space Agency Was Hit by Multiple Cyberattacks, but Officials Say No Sensitive Data Was Taken appeared first on SecurityWeek.

Facial recognition startup Clearview AI has reached a settlement in an Illinois lawsuit alleging its massive photographic collection of faces violated the subjects’ privacy rights.

The post Facial Recognition Startup Clearview AI Settles Privacy Suit appeared first on SecurityWeek.