Email security mainstay Mimecast on Thursday announced the acquisition of Elevate Security, a venture-backed startup working on technology in the user-education and awareness training space. Financial terms of the transaction were not released. The brainchild of Masha Sedova and Robert Fly, Elevate Security launched six years ago with ambitious plans to disrupt the lucrative but tricky security … [Read more...]
Google Patches Six Vulnerabilities With First Chrome Update of 2024
Google on Wednesday announced the first Chrome security update of 2024, which resolves six vulnerabilities, including four reported by external researchers. All the four externally reported security defects are high-severity memory safety flaws, but bug bounty rewards were handed out only for three of them, Google notes in its advisory. The first two bugs, tracked as CVE-2024-0222 and … [Read more...]
Airbus Offering to Buy Atos Cybersecurity Unit for Up to $2 Billion
French aerospace giant Airbus could acquire Atos’ cybersecurity unit for up to $2 billion, the IT company announced on Wednesday. The possible sale of its Big Data and Security (BDS) business was announced by Atos in a market update outlining its strategy for repaying and refinancing financial debts. The potential deal is at a preliminary stage, but Atos said it will initiate a due … [Read more...]
4.5 Million Individuals Affected by Data Breach at HealthEC
Health technology company HealthEC has disclosed a data breach impacting close to 4.5 million customers of its business partners. HealthEC provides population health management services, delivering analytics and insights to help healthcare organizations improve patient outcomes. In an incident notice published on its website just before December, the company explained that, between July 14, 2023, … [Read more...]
Beyond Protocols: How Team Camaraderie Fortifies Security
I am grateful and consider myself fortunate for many reasons. One of those reasons is that my wife and I very much like each other and enjoy spending time together. Unfortunately, not all couples have this, and it is certainly not something that either of us take for granted. As you may know, when we do something with people we enjoy spending time with, it is far more enjoyable. Indeed, we see … [Read more...]
Estes Express Lines Says Personal Data Stolen in Ransomware Attack
Freight shipping giant Estes Express Lines has started informing more than 21,000 individuals that their personal information was stolen in a recent ransomware attack. The incident was identified on October 1, 2023, and the investigation into the matter determined that the attackers gained access to the company’s network on September 26, 2023. While residing in the network, the attackers accessed … [Read more...]
Hacked Mandiant X Account Abused for Cryptocurrency Theft
Mandiant’s account on the social media platform X, formerly Twitter, was hacked on Wednesday and abused to lure users to a website designed to steal cryptocurrency from victims. The account of Mandiant, which is part of Google Cloud, was renamed to ‘Phantom’ and its profile image and description were updated to appear affiliated with the legitimate Phantom cryptocurrency wallet. Messages … [Read more...]
RIPE Account Hacking Leads to Major Internet Outage at Orange Spain
Orange Spain customers were unable to access the internet for several hours on January 3 as a result of a hacker attack that appears to have involved credentials stolen by malware. The hacker took control of Orange Spain’s account with the RIPE Network Coordination Center (NCC). RIPE stands for Réseaux IP Européens, ‘European IP Networks’ in French. The RIPE NCC is the regional internet registry … [Read more...]
Aqua Security Scores $60M Series E Funding
Aqua Security, a late-stage player in the cloud native security platform (CNAPP) space, has banked a $60 million extended Series E funding round at a valuation north of $1 billion. The Israeli container security firm said the funding round was led by new investor Evolution Equity Partners. Previous backers Insight Partners, Lightspeed Venture Partners and StepStone Group also expanded equity … [Read more...]
SentinelOne Snaps up Seed-Stage CNAPP Startup PingSafe
Cybersecurity powerhouse SentinelOne on Wednesday announced plans to snap up PingSafe in a cash-and-stock deal that adds cloud native application protection platform (CNAPP) capabilities to its product portfolio. Financial terms of the transaction, which is expected to close in the first quarter, were not disclosed. SentinelOne, based in Mountain View, Calif., plans to combine PingSafe’s cloud … [Read more...]
SonicWall Buys Banyan Security For ZTNA Technology
Network security appliance vendor SonicWall on Wednesday announced the acquisition of San Francisco startup Banyan Security, adding technology for zero-trust network access to its product portfolio. Financial terms of the deal were not disclosed. Banyan Security, which raised a total of $47 million over two funding rounds, has built technology to help organizations to securely connects users … [Read more...]
Over 900k Impacted by Data Breach at Defunct Boston Ambulance Service
Transformative Healthcare is informing more than 900,000 individuals that their personal information was stolen in a data breach at now-defunct subsidiary Fallon Ambulance Service. The incident, Transformative says in a notification letter to the affected individuals, a copy of which was submitted to the Maine Attorney General’s Office, was detected on April 23, 2023, roughly four months after the … [Read more...]
Several Infostealers Using Persistent Cookies to Hijack Google Accounts
Multiple information stealers have been adopting a new technique that allows them to restore Google cookies and compromise accounts even if the victims change their passwords, threat intelligence firm CloudSEK reports. A vulnerability in Google’s authentication process, described by some as a zero-day, allows threat actors to regenerate persistent Google cookies and gain continuous access to … [Read more...]
Hacker Conversations: Runa Sandvik
The driving motivation for almost all cybersecurity researchers is an insatiable curiosity – it’s like an itch that must be scratched. How that itch is scratched is the difference between different researchers. Runa Sandvik describes herself as a ‘situative researcher’. Situated Learning is a concept that suggests learning cannot be maximized in isolation, but requires an understanding of context; … [Read more...]
Cybersecurity M&A Roundup: 25 Deals Announced in December 2023
Twenty-five cybersecurity-related merger and acquisition (M&A) deals were announced in December 2023. ACI Learning acquires Infosec Learning Audit, cybersecurity and IT training firm ACI Learning has acquired Infosec Learning, a company that provides virtual labs and cyber ranges for personalized learning and skill assessment. The deal enables ACI to expand its portfolio. DeepSeas … [Read more...]
Palestinian Hackers Hit 100 Israeli Organizations in Destructive Attacks
Over the past several months, a hacking group named Cyber Toufan has hit over 100 public and private organizations in Israel, as part of an aggressive campaign fueled by the intensifying geopolitical tensions in the region. Bearing the hallmarks of a sophisticated threat actor and claiming to be formed of Palestinian state cyber warriors, Cyber Toufan rose to fame fast, executing complex … [Read more...]
21 New Mac Malware Families Emerged in 2023
A total of 21 new malware families designed to target macOS systems were discovered in 2023, according to Patrick Wardle, a researcher specializing in the security of Apple devices. Wardle has published a blog post analyzing the new malware families that emerged last year and the total number represents an increase of over 50% compared to 2022. For each of the new malware families, Wardle’s … [Read more...]
Xerox Confirms Data Breach at US Subsidiary Following Ransomware Attack
Printing solutions giant Xerox over the weekend confirmed that its US-based subsidiary Xerox Business Solutions experienced a data breach. The incident, the company says, was limited to Xerox Business Solutions US and was contained by its cybersecurity team. While the attack did not affect Xerox’s corporate systems and had no impact on the company’s operations or data, the investigation launched … [Read more...]
States and Congress Wrestle With Cybersecurity After Iran Attacks Small Town Water Utilities
The tiny Aliquippa water authority in western Pennsylvania was perhaps the least-suspecting victim of an international cyberattack. It had never had outside help in protecting its systems from a cyberattack, either at its existing plant that dates to the 1930s or the new $18.5 million one it is building. Then it — along with several other water utilities — was struck by what federal authorities … [Read more...]
Are Security Appliances fit for Purpose in a Decentralized Workplace?
Security appliances have been traditionally considered one of the most effective forms of perimeter security. That said, this is no longer the case. Today, security appliances feature amongst the most riskiest enterprise devices and are a preferred method for threat actors to infiltrate a business. Let’s investigate why this is the case. 1. Security Appliances Are Infested With High-risk … [Read more...]
- « Previous Page
- 1
- …
- 35
- 36
- 37
- 38
- 39
- …
- 136
- Next Page »