SecurityWeek

CVS Group Restoring Systems Impacted by Cyberattack

Security Week - Tue, 04/09/2024 - 7:19am

Veterinary services provider CVS Group is restoring systems after a cyberattack disrupted its UK operations.

The post CVS Group Restoring Systems Impacted by Cyberattack appeared first on SecurityWeek.

Categories: SecurityWeek

CISO Conversations: Nick McKenzie (Bugcrowd) and Chris Evans (HackerOne)

Security Week - Tue, 04/09/2024 - 7:00am

SecurityWeek discusses cybersecurity leadership with CISOs from crowdsourced hacking organizations Bugcrowd (Nick McKenzie) and HackerOne (Chris Evans)

The post CISO Conversations: Nick McKenzie (Bugcrowd) and Chris Evans (HackerOne) appeared first on SecurityWeek.

Categories: SecurityWeek

DOJ-Collected Information Exposed in Data Breach Affecting 340,000 

Security Week - Tue, 04/09/2024 - 6:56am

Economic analysis and litigation support firm GMA says personal and medical information was stolen in a May 2023 data breach.

The post DOJ-Collected Information Exposed in Data Breach Affecting 340,000  appeared first on SecurityWeek.

Categories: SecurityWeek

Second Ransomware Group Extorting Change Healthcare

Security Week - Tue, 04/09/2024 - 6:18am

RansomHub is extorting Change Healthcare, threatening to release data stolen in a February 2024 BlackCat ransomware attack.

The post Second Ransomware Group Extorting Change Healthcare appeared first on SecurityWeek.

Categories: SecurityWeek

StrikeReady Raises $12M to Build AI-Powered Security Command Center

Security Week - Tue, 04/09/2024 - 6:00am

StrikeReady, an early-stage Silicon Valley startup working on technology to modernize cybersecurity command centers, has banked $12 million in new financing from 33N Ventures. The Palo Alto, Calif.-based StrikeReady said the Series A included equity interests for Hitachi Ventures, Monta Vista Capital and a handful of prominent cybersecurity executives. StrikeReady has raised a total of […]

The post StrikeReady Raises $12M to Build AI-Powered Security Command Center appeared first on SecurityWeek.

Categories: SecurityWeek

Exploitation Attempts Target Unpatched Flaw Affecting Many D-Link NAS Devices

Security Week - Tue, 04/09/2024 - 4:58am

Unpatched D-Link NAS device vulnerability CVE-2024-3273, potentially affecting many devices, is being exploited in the wild.

The post Exploitation Attempts Target Unpatched Flaw Affecting Many D-Link NAS Devices appeared first on SecurityWeek.

Categories: SecurityWeek

Thousands of Ivanti VPN Appliances Impacted by Recent Vulnerability

Security Week - Mon, 04/08/2024 - 10:41am

Researchers at the Shadowserver Foundation identify thousands of internet-exposed Ivanti VPN appliances likely impacted by a recently disclosed vulnerability leading to remote code execution.

The post Thousands of Ivanti VPN Appliances Impacted by Recent Vulnerability appeared first on SecurityWeek.

Categories: SecurityWeek

Healthcare IT Help Desk Employees Targeted in Payment-Hijacking Attacks

Security Week - Mon, 04/08/2024 - 9:29am

The US Department of Health warns of financially motivated social engineering attacks targeting healthcare organizations.

The post Healthcare IT Help Desk Employees Targeted in Payment-Hijacking Attacks appeared first on SecurityWeek.

Categories: SecurityWeek

Key Lawmakers Float New Rules for Personal Data Protection; Bill Would Make Privacy a Consumer Right

Security Week - Mon, 04/08/2024 - 9:23am

The American Privacy Rights Act would preempt most state privacy laws — though it wouldn’t impact certain states’ laws already on the books that protect financial, health or employee data.

The post Key Lawmakers Float New Rules for Personal Data Protection; Bill Would Make Privacy a Consumer Right appeared first on SecurityWeek.

Categories: SecurityWeek

Confidential VMs Hacked via New Ahoi Attacks

Security Week - Mon, 04/08/2024 - 9:16am

New Ahoi attacks Heckler and WeSee target AMD SEV-SNP and Intel TDX with malicious interrupts to hack confidential VMs.

The post Confidential VMs Hacked via New Ahoi Attacks appeared first on SecurityWeek.

Categories: SecurityWeek

Company Offering $30 Million for Android, iOS, Browser Zero-Day Exploits

Security Week - Mon, 04/08/2024 - 7:30am

Crowdfense has announced a $30 million exploit acquisition program covering Android, iOS, Chrome, and Safari zero-days.

The post Company Offering $30 Million for Android, iOS, Browser Zero-Day Exploits appeared first on SecurityWeek.

Categories: SecurityWeek

Google Adds V8 Sandbox to Chrome

Security Week - Mon, 04/08/2024 - 7:08am

Google fights Chrome V8 engine memory safety bugs with a new sandbox and adds it to the bug bounty program.

The post Google Adds V8 Sandbox to Chrome appeared first on SecurityWeek.

Categories: SecurityWeek

NSA Appoints Dave Luber as Cybersecurity Director 

Security Week - Mon, 04/08/2024 - 5:47am

US National Security Agency appoints Dave Luber as its new cybersecurity director following the retirement of Rob Joyce.

The post NSA Appoints Dave Luber as Cybersecurity Director  appeared first on SecurityWeek.

Categories: SecurityWeek

Enterprise AI Security Firm TrojAI Raises $5.75M in Seed Funding

Security Week - Sat, 04/06/2024 - 9:19pm

TrojAI, a provider of enterprise AI security solutions, announced a $5.75 million funding round of additional seed capital and the appointment of Lee Weiner as CEO.

The post Enterprise AI Security Firm TrojAI Raises $5.75M in Seed Funding appeared first on SecurityWeek.

Categories: SecurityWeek

Pages