Collaborate Disseminate
Forty-two cybersecurity-related merger and acquisition (M&A) deals were announced in July 2023.
The post Cybersecurity M&A Roundup: 42 Deals Announced in July 2023 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup: 42 Deals Announced in July 2023
Threat actors have exploited a Salesforce email service zero-day vulnerability and abused Meta features in a sophisticated phishing campaign.
The post Salesforce Email Service Zero-Day Exploited in Phishing Campaign appeared first on SecurityWeek.
Continue reading Salesforce Email Service Zero-Day Exploited in Phishing Campaign
The recently patched Ivanti EPMM zero-day CVE-2023-35078 has been exploited to hack the Norwegian government since at least April 2023.
The post Ivanti Zero-Day Exploited by APT Since at Least April in Norwegian Government Attack appeared first on Se… Continue reading Ivanti Zero-Day Exploited by APT Since at Least April in Norwegian Government Attack
A new power side-channel attack named Collide+Power can allow an attacker to obtain sensitive information and it works against nearly any modern CPU.
The post Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack appeared first on S… Continue reading Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack
The number of ransomware attacks targeting industrial organizations and infrastructure has doubled since the second quarter of 2022, according to Dragos.
The post Ransomware Attacks on Industrial Organizations Doubled in Past Year: Report appeared firs… Continue reading Ransomware Attacks on Industrial Organizations Doubled in Past Year: Report
Ivanti EPMM customers have been warned of CVE-2023-35081, a second zero-day vulnerability that has been exploited in targeted attacks.
The post Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks appeared first on SecurityWeek.
Continue reading Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks
Several industry professionals comment on the SEC’s new cybersecurity incident disclosure rules and their implications.
The post Industry Reactions to New SEC Cyber Incident Disclosure Rules: Feedback Friday appeared first on SecurityWeek.
Continue reading Industry Reactions to New SEC Cyber Incident Disclosure Rules: Feedback Friday
Several vulnerabilities found in Weintek Weincloud could have allowed hackers to manipulate and damage ICS, including PLCs and field devices.
The post Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices appeared first on Sec… Continue reading Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices
The TSA has released updated cybersecurity requirements for pipeline owners and operators, instructing them to test assessment and incident response plans.
The post TSA Updates Pipeline Cybersecurity Requirements appeared first on SecurityWeek.
Continue reading TSA Updates Pipeline Cybersecurity Requirements
An Axis network door controller vulnerability can be exploited to target facilities, exposing them to both physical and cyber threats.
The post Axis Door Controller Vulnerability Exposes Facilities to Physical, Cyber Threats appeared first on SecurityW… Continue reading Axis Door Controller Vulnerability Exposes Facilities to Physical, Cyber Threats