Collaborate Disseminate
VMware’s Threat Analysis Unit finds 34 new vulnerable kernel drivers that can be exploited to alter or erase firmware and escalate privileges.
The post Dozens of Kernel Drivers Allow Attackers to Alter Firmware, Escalate Privileges appeared first on Se… Continue reading Dozens of Kernel Drivers Allow Attackers to Alter Firmware, Escalate Privileges
MITRE announces the release of ATT&CK v14, which brings enhancements related to detections, ICS, and mobile.
The post MITRE Releases ATT&CK v14 With Improvements to Detections, ICS, Mobile appeared first on SecurityWeek.
Continue reading MITRE Releases ATT&CK v14 With Improvements to Detections, ICS, Mobile
AI cybersecurity firm Cranium has raised $25 million in Series A funding, which brings the total investment in the company to $32 million.
The post AI Security Firm Cranium Raises $25 Million appeared first on SecurityWeek.
Continue reading AI Security Firm Cranium Raises $25 Million
New iLeakage side-channel speculative execution attack exploits Safari to steal sensitive information from Macs and iPhones.
The post iLeakage Attack Exploits Safari to Steal Sensitive Data From Macs, iPhones appeared first on SecurityWeek.
Continue reading iLeakage Attack Exploits Safari to Steal Sensitive Data From Macs, iPhones
Japanese watchmaking giant Seiko has confirmed that personal information was stolen in a recent ransomware attack.
The post Japanese Watchmaking Giant Seiko Confirms Personal Data Stolen in Ransomware Attack appeared first on SecurityWeek.
Continue reading Japanese Watchmaking Giant Seiko Confirms Personal Data Stolen in Ransomware Attack
A new project aims to make it easier for PLC programmers to implement secure coding practices by cataloging useful files and functions from each vendor.
The post New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding appeared first on S… Continue reading New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding
Rockwell Automation has warned customers about the impact of the actively exploited Cisco IOS XE zero-day on its Stratix industrial switches.
The post Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches appeared first on Se… Continue reading Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches
The number of Cisco devices hacked via recent zero-days remains high, but the attackers have updated their implant.
The post Number of Cisco Devices Hacked via Zero-Day Remains High as Attackers Update Implant appeared first on SecurityWeek.
Continue reading Number of Cisco Devices Hacked via Zero-Day Remains High as Attackers Update Implant
Rockwell Automation agreed to acquire ICS/OT cybersecurity firm Verve Industrial Protection to expand its offerings.
The post Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial appeared first on SecurityWeek.
Continue reading Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial
Cisco has found a second zero-day vulnerability that has been exploited in recent attacks as the number of hacked devices has started dropping.
The post Cisco Finds Second Zero-Day as Number of Hacked Devices Apparently Drops appeared first on Security… Continue reading Cisco Finds Second Zero-Day as Number of Hacked Devices Apparently Drops