Security Week

VMware patches flaws that expose users to data leakage, command execution and denial-of-service attacks. No temporary workarounds available. 

The post NATO-Flagged Vulnerability Tops Latest VMware Security Patch Batch appeared first on SecurityWeek.

The Likely Exploited Vulnerabilities (LEV) equations can help augment KEV- and EPSS-based remediation prioritization. 

The post Vulnerability Exploitation Probability Metric Proposed by NIST, CISA Researchers  appeared first on SecurityWeek.

SecurityWeek’s 2025 Threat Detection & Incident Response (TDIR) Summit takes place as a virtual summit on Wednesday, May 21st.

The post Event Preview: 2025 Threat Detection & Incident Response (Virtual) Summit appeared first on SecurityWeek.

AI-native security assurance firm TrustCloud has raised $15 million in a strategic funding round led by ServiceNow Ventures.

The post TrustCloud Raises $15 Million for Security Assurance Platform appeared first on SecurityWeek.

Threat protection and intelligence firm CloudSEK raises $19 million in funding from new and existing investors.

The post CloudSEK Raises $19 Million for Threat Intelligence Platform appeared first on SecurityWeek.

A vulnerability in O2’s implementation of the IMS standard resulted in user location data being exposed in network responses.

The post O2 Service Vulnerability Exposed User Location appeared first on SecurityWeek.

New CISA Deputy Director Madhu Gottumukkala has joined the agency from South Dakota’s Bureau of Information and Technology.

The post Madhu Gottumukkala Officially Announced as CISA Deputy Director appeared first on SecurityWeek.

San Francisco incident response coordination startup banks $15 million in a Series A funding round led by Ballistic Ventures.

The post BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software appeared first on SecurityWeek.

Procolored’s public website served dozens of software downloads containing information stealer malware and a backdoor.

The post Printer Company Procolored Served Infected Software for Months appeared first on SecurityWeek.

The UK’s Legal Aid Agency was targeted in a cyberattack in April and it recently determined that hackers have stolen sensitive data.

The post UK Legal Aid Agency Finds Data Breach Following Cyberattack appeared first on SecurityWeek.

Serviceaide exposed a database containing personal and medical information belonging to Catholic Health patients.

The post 480,000 Catholic Health Patients Impacted by Serviceaide Data Leak appeared first on SecurityWeek.

Neuromorphic computing is moving from theory to reality, with brain-inspired processors offering real-time intelligence, low power consumption, and built-in privacy—ushering in a new era for edge devices and cybersecurity.

The post Spiking Neural Networks: Brain-Inspired Chips That Could Keep Your Data Safe appeared first on SecurityWeek.

Harbin Clinic says the information of over 200,000 patients was stolen in a July 2024 data breach at Nationwide Recovery Services.

The post 200,000 Harbin Clinic Patients Impacted by NRS Data Breach appeared first on SecurityWeek.

Eric Council Jr. was sentenced to prison for hacking SEC’s official X account and publishing fraudulent posts increasing Bitcoin value.

The post Prison Sentence for Man Involved in SEC X Account Hack appeared first on SecurityWeek.

Pwn2Own participants demonstrated exploits against VMs, AI, browsers, servers, containers, and operating systems.

The post Hackers Earn Over $1 Million at Pwn2Own Berlin 2025 appeared first on SecurityWeek.

Google says the hacking group behind the recent cyberattacks on UK retailers is now shifting focus to the US.

The post Google Warns UK Retailer Hackers Now Targeting US appeared first on SecurityWeek.

A summary of noteworthy stories that might have slipped under the radar this week.

The post In Other News: Hackers Not Behind Blackout, CISO Docuseries, Dior Data Breach appeared first on SecurityWeek.

The 15th edition of NATO’s Locked Shields cyber defense exercise brought together 4,000 experts from 41 countries.

The post From 60 to 4,000: NATO’s Locked Shields Reflects Cyber Defense Growth appeared first on SecurityWeek.

Russia-linked APT28 has been exploiting mail server vulnerabilities against government and defense entities since September 2023.

The post Russian APT Exploiting Mail Servers Against Government, Defense Organizations appeared first on SecurityWeek.

The FBI says former federal and state government officials are targeted with texts and AI-generated voice messages impersonating senior US officials.

The post FBI Warns of Deepfake Messages Impersonating Senior Officials appeared first on SecurityWeek.