More than 100,000 websites are affected by a supply chain attack injecting malware via a Polyfill domain.

The post Polyfill Supply Chain Attack Hits Over 100k Websites  appeared first on SecurityWeek.

Five WordPress plugins were injected with malicious code that creates a new administrative account.

The post Several Plugins Compromised in WordPress Supply Chain Attack  appeared first on SecurityWeek.

A recently patched Vision Pro vulnerability was classified by Apple as a DoS issue, but a researcher has shown that it’s ‘scary’.

The post Spatial Computing Hack Exploits Apple Vision Pro Flaw to Fill Room With Spiders, Bats appeared first on SecurityWeek.

Hundreds of PC and server models may be affected by CVE-2024-0762, a privilege escalation and code execution flaw in Phoenix SecureCore UEFI firmware.

The post Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability appeared first on SecurityWeek.

Government agencies in the US, New Zealand, and Canada have published new guidance on improving network security.

The post US, Allies Publish Guidance on Securing Network Access appeared first on SecurityWeek.

Researchers have targeted the MTE security feature in Arm CPUs and showed how attackers could bypass protections.

The post New TikTag Attack Targets Arm CPU Security Feature  appeared first on SecurityWeek.

The increase in mass exploitation involving edge services and devices is likely to worsen.

The post Edge Devices: The New Frontier for Mass Exploitation Attacks appeared first on SecurityWeek.

Microsoft is not rolling out Recall with Copilot+ PCs as it’s seeking additional feedback and working on improving security.

The post Microsoft Delaying Recall Feature to Improve Security appeared first on SecurityWeek.

Pyte has raised $5 million for its secure computation platform, bringing the total investment in the company to $12 million. 

The post Pyte Raises $5 Million for Secure Data Collaboration Solutions appeared first on SecurityWeek.

AWS announced passkey MFA for IAM and root users, IAM Access Analyzer updates, and Amazon GuardDuty Malware Protection for S3.

The post AWS Announces Authentication and Malware Protection Enhancements appeared first on SecurityWeek.

Data security company Cyberhaven has raised $88 million in a Series C funding round that brings the total to $136 million.

The post Data Security Firm Cyberhaven Raises $88 Million at $488 Million Valuation appeared first on SecurityWeek.

Apple has released a visionOS update that patches CVE-2024-27812, which may be the first flaw specific to the VR headset.

The post Apple Patches Vision Pro Vulnerability Used in Possibly ‘First Ever Spatial Computing Hack’ appeared first on SecurityWeek.

Forescout's 2024 analysis of the riskiest devices highlights vulnerabilities and threat actor interactions across IT, IoT, OT, and IoMT.

The post Dangerous Liaisons: The Interaction Between Threat Actors and High-Risk Devices appeared first on SecurityWeek.

Mandiant says a financially motivated threat actor has compromised hundreds of Snowflake instances using customer credentials stolen via infostealer malware that infected non-Snowflake owned systems.

The post Snowflake Attacks: Mandiant Links Data Breaches to Infostealer Infections appeared first on SecurityWeek.

Fortinet announces plans to acquire Lacework, a late-stage cloud security startup that was once listed as a “unicorn” company valued north of $1 billion.

The post Fortinet Expands Cloud Security Portfolio with Lacework Acquisition appeared first on SecurityWeek.

Tenable goes shopping again in Israel with plans to buy early stage startup Eureka Security to boost data security posture management tooling.

The post Tenable to Acquire Eureka Security to Boost DSPM Capabilities appeared first on SecurityWeek.

The FCC proposes that broadband providers plan for BGP security and provide quarterly reports on implemented risk mitigations.

The post FCC Proposes BGP Security Reporting for Broadband Providers appeared first on SecurityWeek.

Gone are the days when cyberattacks were deemed concerns solely by corporate giants.

The post Upleveling the State of SMB Cybersecurity appeared first on SecurityWeek.

Cox recently patched a series of vulnerabilities that could have allowed hackers to remotely take control of millions of modems.

The post Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking appeared first on SecurityWeek.

The email addresses and other information of hundreds of British, French and EU politicians have been found on the dark web.

The post Information of Hundreds of European Politicians Found on Dark Web appeared first on SecurityWeek.

Cloudlfare acquires Boston seed-stage startup BastionZero to bolster its Zero Trust Network Access technology portfolio.

The post Cloudflare Expands Zero Trust Capabilities with Acquisition of BastionZero appeared first on SecurityWeek.

SecurityWeek editor-at-large Ryan Naraine examines the broad tension between tech innovation and privacy rights at a time when ChatGPT-like bots and generative-AI apps are starting to dominate the landscape. 

The post Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach? appeared first on SecurityWeek.

Assembling a diverse team, outlining clear objectives, and meticulously assessing your network landscape can enable organizations to successfully navigate SASE migration without hiccups and pitfalls.

The post 8 Degrees of Secure Access Service Edge       appeared first on SecurityWeek.

Data security and AI governance company Zendata has emerged from stealth mode with $2 million in seed funding.

The post Zendata Emerges From Stealth With Data Security, AI Governance Solutions appeared first on SecurityWeek.

The two primary components to the solution are to encrypt company data at all times, and to decrypt only when the file is required for use.

The post New Endpoint Protection Platform by Cigent Blocks Ransomware at the Data Level appeared first on SecurityWeek.

Averson secures seed funding to build technology that uses AI to identify cloud security weaknesses and counter cyberattacks.

The post Averlon Emerges From Stealth Mode With $8 Million in Funding appeared first on SecurityWeek.

Under the new U.S. Cyber Trust Mark Initiative, manufacturers can affix the label on their products if they meet federal cybersecurity standards.

The post Cybersecurity Labeling for Smart Devices Aims to Help People Choose Items Less Likely to be Hacked appeared first on SecurityWeek.

Attackers are getting more sophisticated, better armed, and faster. Nothing in Rapid7's 2024 Attack Intelligence Report suggests that this will change.

The post Zero-Day Attacks and Supply Chain Compromises Surge, MFA Remains Underutilized: Rapid7 Report appeared first on SecurityWeek.