Cybersecurity News, Insights and Analysis | SecurityWeek
WEBEvent: ICS Cybersecurity Conference. Oct. 21-24, 2024. The leading industrial cybersecurity conference for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity. Register.
Latest News - SecurityWeek
WEB3 days ago · Adobe Patches Critical, Code Execution Flaws in Multiple Products. Patch Tuesday: Adobe releases patches for 28 security vulnerabilities and warned of code execution risks on Windows and macOS platforms. September 10, 2024.
News - SecurityWeek
WEB3 days ago · US Gov Removing Four-Year-Degree Requirements for Cyber Jobs. The US government will remove "unnecessary degree requirements" in favor of skills-based hiring to help fill 500,000 open cybersecurity jobs. September 6, 2024.
Major Backdoor in Millions of RFID Cards Allows Instant Cloning
WEBAug 20, 2024 · French security services firm Quarkslab has made an eye-popping discovery: a significant backdoor in millions of contactless cards made by Shanghai Fudan Microelectronics Group, a leading chip manufacturer in China. The backdoor, documented in a research paper by Quarkslab researcher Philippe Teuwen, allows the instantaneous cloning of RFID ...
Bug Bounty Hunters Earned Over $4M for XSS Flaws
WEBOct 30, 2020 · The second most awarded vulnerability type in 2020, HackerOne says, is Improper Access Control, which saw a 134% increase in occurrence compared to 2019, with a total of $4 million paid by companies in bug bounty rewards. Information Disclosure maintained the third position it held in last year’s report, registering a …
Predictions: SecurityWeek’s 2022 Cybersecurity Outlook
WEBJan 4, 2022 · Members of the SecurityWeek editorial team look into their crystal balls and make some bold predictions about the big cybersecurity stories that will dominate the headlines in 2022. Our predictions cover the range of issues plaguing cybersecurity, including ransomware extortion attacks, software supply chain weaknesses, ICS security, geopolitics, IoT and privacy.
Microsoft Blames Nation-State Threat Actor for Confluence Zero …
WEBOctober 10, 2023. Researchers at Microsoft say a known nation-state threat actor is behind the zero-day exploits hitting Atlassian’s Confluence Data Center and Server products. A note from Redmond linked the ongoing attacks to an APT group tracked as Storm-0062 and warned that malicious activity dates back to September 14, a full three weeks ...
Malware & Threats Archives - SecurityWeek
WEBIranian Hackers Use New Tickler Malware for Intelligence Gathering on Critical Infrastructure. The Iran-linked state-sponsored hacker group tracked as Peach Sandstorm has started using a new backdoor in attacks aimed at the US and UAE. Eduard Kovacs August 29, 2024.
Governments Issue Warning After Play Ransomware Hits …
WEBDec 19, 2023 · US and Australian government agencies warn organizations of the Play ransomware group’s double-extortion tactics. The US cybersecurity agency CISA, the FBI, and the Australian Cyber Security Centre (ACSC) have published a new advisory detailing the tactics, techniques, and procedures (TTPs) associated with Play ransomware attacks.
Cyberattack Disrupts Microchip Technology Manufacturing …
WEBAugust 21, 2024. US-based semiconductor supplier Microchip Technology (NASDAQ: MCHP) has disclosed a cyberattack that has impacted operations at some of its manufacturing facilities. The company revealed in a regulatory filing on Tuesday that it detected suspicious activity on its IT systems on August 17, and on August 19 it …