Security Week

Subscribe to Security Week feed Security Week
Latest cybersecurity news and expert insights from SecurityWeek's RSS feed
Updated: 37 min 10 sec ago

Thousands of Ivanti VPN Appliances Impacted by Recent Vulnerability

Mon, 04/08/2024 - 10:41am

Researchers at the Shadowserver Foundation identify thousands of internet-exposed Ivanti VPN appliances likely impacted by a recently disclosed vulnerability leading to remote code execution.

The post Thousands of Ivanti VPN Appliances Impacted by Recent Vulnerability appeared first on SecurityWeek.

Categories: SecurityWeek

Healthcare IT Help Desk Employees Targeted in Payment-Hijacking Attacks

Mon, 04/08/2024 - 9:29am

The US Department of Health warns of financially motivated social engineering attacks targeting healthcare organizations.

The post Healthcare IT Help Desk Employees Targeted in Payment-Hijacking Attacks appeared first on SecurityWeek.

Categories: SecurityWeek

Key Lawmakers Float New Rules for Personal Data Protection; Bill Would Make Privacy a Consumer Right

Mon, 04/08/2024 - 9:23am

The American Privacy Rights Act would preempt most state privacy laws — though it wouldn’t impact certain states’ laws already on the books that protect financial, health or employee data.

The post Key Lawmakers Float New Rules for Personal Data Protection; Bill Would Make Privacy a Consumer Right appeared first on SecurityWeek.

Categories: SecurityWeek

Confidential VMs Hacked via New Ahoi Attacks

Mon, 04/08/2024 - 9:16am

New Ahoi attacks Heckler and WeSee target AMD SEV-SNP and Intel TDX with malicious interrupts to hack confidential VMs.

The post Confidential VMs Hacked via New Ahoi Attacks appeared first on SecurityWeek.

Categories: SecurityWeek

Company Offering $30 Million for Android, iOS, Browser Zero-Day Exploits

Mon, 04/08/2024 - 7:30am

Crowdfense has announced a $30 million exploit acquisition program covering Android, iOS, Chrome, and Safari zero-days.

The post Company Offering $30 Million for Android, iOS, Browser Zero-Day Exploits appeared first on SecurityWeek.

Categories: SecurityWeek

Google Adds V8 Sandbox to Chrome

Mon, 04/08/2024 - 7:08am

Google fights Chrome V8 engine memory safety bugs with a new sandbox and adds it to the bug bounty program.

The post Google Adds V8 Sandbox to Chrome appeared first on SecurityWeek.

Categories: SecurityWeek

NSA Appoints Dave Luber as Cybersecurity Director 

Mon, 04/08/2024 - 5:47am

US National Security Agency appoints Dave Luber as its new cybersecurity director following the retirement of Rob Joyce.

The post NSA Appoints Dave Luber as Cybersecurity Director  appeared first on SecurityWeek.

Categories: SecurityWeek

Enterprise AI Security Firm TrojAI Raises $5.75M in Seed Funding

Sat, 04/06/2024 - 9:19pm

TrojAI, a provider of enterprise AI security solutions, announced a $5.75 million funding round of additional seed capital and the appointment of Lee Weiner as CEO.

The post Enterprise AI Security Firm TrojAI Raises $5.75M in Seed Funding appeared first on SecurityWeek.

Categories: SecurityWeek

House to Take up Bill to Reauthorize Crucial US Spy Program as Expiration Date Looms

Sat, 04/06/2024 - 8:22am

Section 702 of the Foreign Intelligence Surveillance Act expires on April 19.

The post House to Take up Bill to Reauthorize Crucial US Spy Program as Expiration Date Looms appeared first on SecurityWeek.

Categories: SecurityWeek

Browsing in Incognito Mode Doesn’t Protect You as Much as You Might Think

Sat, 04/06/2024 - 8:03am

Incognito modes generally do not prevent the websites you visit from seeing your location, via your IP address, or stop your internet service provider from logging your activities.

The post Browsing in Incognito Mode Doesn’t Protect You as Much as You Might Think appeared first on SecurityWeek.

Categories: SecurityWeek

Cisco Warns of Vulnerability in Discontinued Small Business Routers

Fri, 04/05/2024 - 10:45am

Cisco says it will not release patches for a cross-site scripting vulnerability impacting end-of-life small business routers.

The post Cisco Warns of Vulnerability in Discontinued Small Business Routers appeared first on SecurityWeek.

Categories: SecurityWeek

Tech Companies Want to Build Artificial General Intelligence. But Who Decides When AGI is Attained?

Fri, 04/05/2024 - 10:25am

With so much money riding on the promise of AI advances, it’s no surprise that AGI is also becoming a corporate buzzword that sometimes attracts a quasi-religious fervor.

The post Tech Companies Want to Build Artificial General Intelligence. But Who Decides When AGI is Attained? appeared first on SecurityWeek.

Categories: SecurityWeek

Pages