Cyber Security
Cybersecurity
Allegations of Data Violations by Lenovo: US Law Firm Raises Concerns
Lenovo is under scrutiny as a US law firm alleges the company breached DOJ guidelines concerning data transfers to foreign adversaries, specifically China. Lenovo has ...
Cybersecurity
New Android Malware Identified in Device Firmware Raising Alarms
Android malware known as Keenadu has been discovered within the firmware of various brands, enabling it to breach installed apps and seize control of affected ...
Cybersecurity
Italian University Struggles With Disruption After Cyberattack
Rome’s La Sapienza University, a key academic institution in Italy, has been grappling with severe disruptions following a significant cyberattack on February 2. This attack ...
News
The Rise of TGR-STA-1030: The Global ‘Shadow Campaigns’ Targeting Government Infrastructure
A new cyberespionage group, TGR-STA-1030/UNC6619, known for its "Shadow Campaigns," has targeted government infrastructure in 155 countries, highlighting a new global threat landscape.
Cybersecurity
DKnife Toolkit: A Persistent Threat to Network Security
DKnife is a powerful Linux-based toolkit used by cybercriminals to hijack router traffic, allowing them to monitor and manipulate data. Discovered by Cisco Talos, it ...
Cybersecurity
Lema AI Secures $24 Million to Bolster Supply Chain Security
Lema AI exits stealth mode, securing $24M in funding across Series A and seed rounds, aimed at advancing its supply chain security platform.
Cybersecurity
Warlock Ransomware Gang Breach at SmarterTools: Email System Compromised
The Warlock ransomware gang has infiltrated SmarterTools’ network by breaching the company's email system but has not disrupted critical business functions or accessed account data. ...
News
Ransomware Gangs Reconsider Strategies as Data Theft Returns Diminish
With diminishing returns from data theft alone, ransomware gangs are exploring the return to data encryption for extortion. Altered tactics reflect evolving criminal strategies to ...
Cybersecurity
Outtake’s $40 Million Infusion to Battle AI-Powered Cyber Threats
The cybersecurity startup Outtake secures $40 million in Series B funding, bringing its total funding to $60 million. This financing round aims to enhance Outtake's ...
Cybersecurity
Exploitation of SolarWinds Web Help Desk Instances Raises Serious Security Concerns
Microsoft defender team recently uncovered a sophisticated multi-stage intrusion exploiting SolarWinds Web Help Desk instances, endangering network security by leveraging exposed web help interfaces for ...
Application Security
7-Zip Targeted by Malicious Website: Users Turned Into Unwitting Proxy Nodes
Cybercriminals have crafted a counterfeit 7-Zip website, installing a trojanized version of the archiving tool that hijacks user computers as residential proxy nodes. This tactic ...
Cybersecurity
Data Exposure Risks with Zero-Click Prompt Injection in AI Chat Apps
Zero-click prompt injection can expose sensitive data when AI agents interact with messaging apps. Attackers manipulate chat prompts to generate data-leaking URLs, leading to inadvertent ...
Cybersecurity
Vega Expands with $120 Million Series B Funding
Security analytics platform Vega has raised $120 million in a Series B funding round, bringing its total fundraising to $185 million. This latest investment highlights ...
Cybersecurity
Reco’s Strategic Move: $30 Million Boost to Bolster AI SaaS Security
Reco, a cloud security innovator, has secured $30 million in new funding, less than 10 months after its previous round. This investment increases its total ...
Cybersecurity
Adobe Patch Release Targets Critical Vulnerabilities in Creative Software
Adobe has rolled out a new patch addressing 44 vulnerabilities across its suite of creative applications. These fixes aim to combat flaws in products like ...
Cybersecurity
European Commission Gives Nod to Google’s Acquisition of Wiz
The European Commission has approved Google's $32 billion acquisition of cloud security firm Wiz. This decision followed extensive feedback from customers and rival vendors, signaling ...
Application Security
Microsoft Investigates Admin Center Access Issues in Microsoft 365
Microsoft is addressing access issues impacting administrators of Microsoft 365 business and enterprise subscriptions. Some admins report being unable to access the admin center, with ...
News
Dutch Police Arrest Suspect in JokerOTP Phishing Tool Operation
Authorities in the Netherlands have apprehended a suspect linked to the notorious JokerOTP, a phishing automation tool. This tool is notorious for hijacking accounts by ...
News
New Reynolds Ransomware Uses BYOVD Technique to Elude Detection
Cybersecurity experts have discovered Reynolds ransomware, a new threat employing the Bring Your Own Vulnerable Driver (BYOVD) technique. This approach allows the ransomware to disable ...
Cybersecurity
Nevada Introduces Comprehensive Data Classification Framework Post-Cyberattack
Nevada has developed a framework to classify data into "public," "sensitive," "confidential," and "restricted" categories, improving cybersecurity preparedness following a cyberattack.
Cybersecurity
ShinyHunters Claims Breach of Florida DMV DAVID Database
Application Security
GoldFactory and Mantax Otax Target Indonesian Android Bank Users
CVE Vulnerability Alerts
Aurora Ransomware Operators Use Cursor AI to Execute Network Attacks
TOP CYBERSECURITY HEADLINES
Application Security
UNC3569 Exploits Sogou Input Method to Deploy GRAYRABBIT Backdoor
Application Security
Attackers Use BYOD Weaknesses to Access M365 via Graph API
This Week’s Security Spotlight
Application Security
OpenAI Agents Made 18,000 Unauthorized Edits to German Wiki
Application Security
Judge Rules Pentagon Actions Against Anthropic Unlawful
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
The Rise of TGR-STA-1030: The Global ‘Shadow Campaigns’ Targeting Government Infrastructure
A new cyberespionage group, TGR-STA-1030/UNC6619, known for its "Shadow Campaigns," has targeted government infrastructure in 155 countries, highlighting a new global threat landscape.
DKnife Toolkit: A Persistent Threat to Network Security
DKnife is a powerful Linux-based toolkit used by cybercriminals to hijack router traffic, allowing them to monitor and manipulate data. Discovered by Cisco Talos, it ...
Lema AI Secures $24 Million to Bolster Supply Chain Security
Lema AI exits stealth mode, securing $24M in funding across Series A and seed rounds, aimed at advancing its supply chain security platform.
Warlock Ransomware Gang Breach at SmarterTools: Email System Compromised
The Warlock ransomware gang has infiltrated SmarterTools’ network by breaching the company's email system but has not disrupted critical business functions or accessed account data. ...
Ransomware Gangs Reconsider Strategies as Data Theft Returns Diminish
With diminishing returns from data theft alone, ransomware gangs are exploring the return to data encryption for extortion. Altered tactics reflect evolving criminal strategies to ...
Outtake’s $40 Million Infusion to Battle AI-Powered Cyber Threats
The cybersecurity startup Outtake secures $40 million in Series B funding, bringing its total funding to $60 million. This financing round aims to enhance Outtake's ...
Exploitation of SolarWinds Web Help Desk Instances Raises Serious Security Concerns
Microsoft defender team recently uncovered a sophisticated multi-stage intrusion exploiting SolarWinds Web Help Desk instances, endangering network security by leveraging exposed web help interfaces for ...
7-Zip Targeted by Malicious Website: Users Turned Into Unwitting Proxy Nodes
Cybercriminals have crafted a counterfeit 7-Zip website, installing a trojanized version of the archiving tool that hijacks user computers as residential proxy nodes. This tactic ...
Data Exposure Risks with Zero-Click Prompt Injection in AI Chat Apps
Zero-click prompt injection can expose sensitive data when AI agents interact with messaging apps. Attackers manipulate chat prompts to generate data-leaking URLs, leading to inadvertent ...
Vega Expands with $120 Million Series B Funding
Security analytics platform Vega has raised $120 million in a Series B funding round, bringing its total fundraising to $185 million. This latest investment highlights ...
Reco’s Strategic Move: $30 Million Boost to Bolster AI SaaS Security
Reco, a cloud security innovator, has secured $30 million in new funding, less than 10 months after its previous round. This investment increases its total ...
Adobe Patch Release Targets Critical Vulnerabilities in Creative Software
Adobe has rolled out a new patch addressing 44 vulnerabilities across its suite of creative applications. These fixes aim to combat flaws in products like ...
European Commission Gives Nod to Google’s Acquisition of Wiz
The European Commission has approved Google's $32 billion acquisition of cloud security firm Wiz. This decision followed extensive feedback from customers and rival vendors, signaling ...
Microsoft Investigates Admin Center Access Issues in Microsoft 365
Microsoft is addressing access issues impacting administrators of Microsoft 365 business and enterprise subscriptions. Some admins report being unable to access the admin center, with ...
Dutch Police Arrest Suspect in JokerOTP Phishing Tool Operation
Authorities in the Netherlands have apprehended a suspect linked to the notorious JokerOTP, a phishing automation tool. This tool is notorious for hijacking accounts by ...
New Reynolds Ransomware Uses BYOVD Technique to Elude Detection
Cybersecurity experts have discovered Reynolds ransomware, a new threat employing the Bring Your Own Vulnerable Driver (BYOVD) technique. This approach allows the ransomware to disable ...
Nevada Introduces Comprehensive Data Classification Framework Post-Cyberattack
Nevada has developed a framework to classify data into "public," "sensitive," "confidential," and "restricted" categories, improving cybersecurity preparedness following a cyberattack.
Suspected Premature Alerts Among Telecommunications on Telnet Vulnerability
Telecommunications companies may have had early alerts about the significant January Telnet vulnerability. An analysis reveals that unusual port filtering and traffic patterns might indicate ...
GitGuardian Secures $50 Million to Advance Secrets Detection and Identity Management
GitGuardian, a leader in secrets detection, has successfully raised $50 million in a funding round. Learn how this financial boost aims to enhance their offerings ...
Conduent Breach Expands in Scope, Affecting 25 Million: Impact on Volvo Group
Recent revelations show the Conduent data breach affects around 25 million individuals, considerably more than the initially estimated 10 million. The breach involves sensitive data, ...