July 2024

PortSwigger Scores Hefty $112 Million Investment

PortSwigger Scores Hefty $112 Million Investment 2024-07-01 at 21:46 By SecurityWeek News The British company behind the popular Burp Suite pen-test utilities has banked a massive $112 million investment from Brighton Park Capital. The post PortSwigger Scores Hefty $112 Million Investment appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Loading spinner

PortSwigger Scores Hefty $112 Million Investment Read More »

Antitrust cops cry foul over Meta’s pay-or-consent ultimatum to Europeans

Antitrust cops cry foul over Meta’s pay-or-consent ultimatum to Europeans 2024-07-01 at 21:16 By Brandon Vigliarolo Facebook, Instagram gobble up same data whether you hand over cash or not European Union antitrust regulators have accused Meta of violating the bloc’s Digital Markets Act (DMA) with its “pay or consent” advertising model, a source of complaints

React to this headline:

Loading spinner

Antitrust cops cry foul over Meta’s pay-or-consent ultimatum to Europeans Read More »

Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks

Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks 2024-07-01 at 20:16 By A trio of security flaws has been uncovered in the CocoaPods dependency manager for Swift and Objective-C Cocoa projects that could be exploited to stage software supply chain attacks, putting downstream customers at severe risks. The vulnerabilities allow

React to this headline:

Loading spinner

Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks Read More »

HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts

HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts 2024-07-01 at 19:31 By Ryan Naraine HubSpot is “actively investigating and blocking attempts” to hack into customer accounts but some targets have already been compromised. The post HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Loading spinner

HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts Read More »

Hacker Conversations: Chris Evans, Hacker and CISO

Hacker Conversations: Chris Evans, Hacker and CISO 2024-07-01 at 19:31 By Kevin Townsend Chris Evans, CISO and chief hacking officer at HackerOne, challenges the common perception of both hackers and their motivation. The post Hacker Conversations: Chris Evans, Hacker and CISO appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Loading spinner

Hacker Conversations: Chris Evans, Hacker and CISO Read More »

The power of partnership in mitigating cyber risk: A CFO’s perspective

The power of partnership in mitigating cyber risk: A CFO’s perspective 2024-07-01 at 19:16 By Security leaders, by closely partnering with CFOs, can ensure cybersecurity risks are considered and investments to mitigate such risks are prioritized. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Loading spinner

The power of partnership in mitigating cyber risk: A CFO’s perspective Read More »

Boeing to reacquire spun-off supplier Spirit AeroSpace to shore up safety

Boeing to reacquire spun-off supplier Spirit AeroSpace to shore up safety 2024-07-01 at 18:46 By Brandon Vigliarolo Because the best place for a troubled supplier is beneath the wing of original parent company Nine years and a whole bunch of controversy later, Boeing has decided to reacquire Spirit AeroSystems, maker of parts including the door

React to this headline:

Loading spinner

Boeing to reacquire spun-off supplier Spirit AeroSpace to shore up safety Read More »

Verizon hit with whopping $847M verdict for infringing 5G and hotspot patents

Verizon hit with whopping $847M verdict for infringing 5G and hotspot patents 2024-07-01 at 18:02 By Jude Karabus Must be hard to face a huge, unexpected bill, amirite? In one of the most massive patent verdicts in legal history, a federal jury in East Texas has ordered cellular giant Verizon to pay patentholder General Access

React to this headline:

Loading spinner

Verizon hit with whopping $847M verdict for infringing 5G and hotspot patents Read More »

OSHA announces additional workplace safety initiatives

OSHA announces additional workplace safety initiatives 2024-07-01 at 17:46 By The Occupational Safety and Health Administration (OSHA) announced additional funding for workplace safety initiatives, including additional training. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Loading spinner

OSHA announces additional workplace safety initiatives Read More »

Nasty regreSSHion bug in OpenSSH puts around 700K Linux boxes at risk

Nasty regreSSHion bug in OpenSSH puts around 700K Linux boxes at risk 2024-07-01 at 17:16 By Connor Jones Full system takeovers on the cards, for those with enough patience to pull it off Glibc-based Linux systems are vulnerable to a new bug (CVE-2024-6387) in OpenSSH’s server (sshd) and should upgrade to the latest version.… This

React to this headline:

Loading spinner

Nasty regreSSHion bug in OpenSSH puts around 700K Linux boxes at risk Read More »

Landmark Admin Discloses Data Breach Impacting Personal, Medical Information

Landmark Admin Discloses Data Breach Impacting Personal, Medical Information 2024-07-01 at 17:01 By Ionut Arghire Life insurance company Landmark Admin says personal, medical, and insurance information was compromised in a May data breach. The post Landmark Admin Discloses Data Breach Impacting Personal, Medical Information appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Loading spinner

Landmark Admin Discloses Data Breach Impacting Personal, Medical Information Read More »

Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty Program

Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty Program 2024-07-01 at 17:01 By Eduard Kovacs Google has announced a new KVM bug bounty program named kvmCTF with rewards of up to $250,000 for a full VM escape. The post Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty

React to this headline:

Loading spinner

Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty Program Read More »

Beijing says state owns China’s rare earth metals

Beijing says state owns China’s rare earth metals 2024-07-01 at 16:36 By Dan Robinson Better management of critical materials or retaliation for sanctions? Beijing has decreed that rare earth metals belong to the state under new regulations said to be aimed at protecting supplies in the name of national security, but which will be seen

React to this headline:

Loading spinner

Beijing says state owns China’s rare earth metals Read More »

SCYTHE 4.3 enables organizations to test and validate their defenses

SCYTHE 4.3 enables organizations to test and validate their defenses 2024-07-01 at 16:36 By Industry News SCYTHE has announced SCYTHE 4.3, which brings a host of enhancements designed to support and advance cybersecurity teams’ capabilities in threat emulation, vulnerability management, and security integration. SCYTHE 4.3 new features summary SCYTHE 4.3 introduces several new features for

React to this headline:

Loading spinner

SCYTHE 4.3 enables organizations to test and validate their defenses Read More »

CapraRAT Spyware Disguised as Popular Apps Threatens Android Users

CapraRAT Spyware Disguised as Popular Apps Threatens Android Users 2024-07-01 at 16:16 By The threat actor known as Transparent Tribe has continued to unleash malware-laced Android apps as part of a social engineering campaign to target individuals of interest. “These APKs continue the group’s trend of embedding spyware into curated video browsing applications, with a

React to this headline:

Loading spinner

CapraRAT Spyware Disguised as Popular Apps Threatens Android Users Read More »

Indian Software Firm’s Products Hacked to Spread Data-Stealing Malware

Indian Software Firm’s Products Hacked to Spread Data-Stealing Malware 2024-07-01 at 16:16 By Installers for three different software products developed by an Indian company named Conceptworld have been trojanized to distribute information-stealing malware. The installers correspond to Notezilla, RecentX, and Copywhiz, according to cybersecurity firm Rapid7, which discovered the supply chain compromise on June 18,

React to this headline:

Loading spinner

Indian Software Firm’s Products Hacked to Spread Data-Stealing Malware Read More »

3 Ways to Realize Full Value from Microsoft Security Product Investments

3 Ways to Realize Full Value from Microsoft Security Product Investments 2024-07-01 at 16:01 By As companies face the challenges inherent in implementing the bevy of Microsoft Security products that are available, they may find a managed security service provider can play a key role in helping them maximize the value of their investment. This

React to this headline:

Loading spinner

3 Ways to Realize Full Value from Microsoft Security Product Investments Read More »

Clockwork Blue: Automating Security Defenses with SOAR and AI

Clockwork Blue: Automating Security Defenses with SOAR and AI 2024-07-01 at 16:01 By David Broggy It’s impractical to operate security operations alone, using manual human processes. Finding opportunities to automate SecOps is an underlying foundation of Zero Trust and an essential architecture component for enterprise-scale SOCs. Let’s discuss what SOAR is, its common uses, and

React to this headline:

Loading spinner

Clockwork Blue: Automating Security Defenses with SOAR and AI Read More »

Scroll to Top