Collaborate Disseminate
Google has also mentioned seeing React2Shell attacks conducted by Iranian threat actors.
The post Google Sees 5 Chinese Groups Exploiting React2Shell for Malware Delivery appeared first on SecurityWeek.
Continue reading Google Sees 5 Chinese Groups Exploiting React2Shell for Malware Delivery
Apple has released macOS and iOS updates to patch two WebKit zero-days exploited in an “extremely sophisticated” attack.
The post Apple Patches Two Zero-Days Tied to Mysterious Exploited Chrome Flaw appeared first on SecurityWeek.
Continue reading Apple Patches Two Zero-Days Tied to Mysterious Exploited Chrome Flaw
The Akira ransomware group took credit for the Fieldtex Products hack in November, claiming to have stolen 14 Gb of data.
The post Fieldtex Data Breach Impacts 238,000 appeared first on SecurityWeek.
Continue reading Fieldtex Data Breach Impacts 238,000
Notepad++ found a vulnerability in the way the software updater authenticates update files.
The post Notepad++ Patches Updater Flaw After Reports of Traffic Hijacking appeared first on SecurityWeek.
Continue reading Notepad++ Patches Updater Flaw After Reports of Traffic Hijacking
Participants earned rewards at the hacking competition for Grafana, Linux Kernel, Redis, MariaDB, and PostgreSQL vulnerabilities.
The post $320,000 Paid Out at Zeroday.Cloud for Open Source Software Exploits appeared first on SecurityWeek.
Continue reading $320,000 Paid Out at Zeroday.Cloud for Open Source Software Exploits
Eleven companies took part in the evaluations and several have boasted 100% detection and coverage rates.
The post MITRE Posts Results of 2025 ATT&CK Enterprise Evaluations appeared first on SecurityWeek.
Continue reading MITRE Posts Results of 2025 ATT&CK Enterprise Evaluations
Security firms have seen cryptocurrency miners, Linux backdoors, botnet malware, and various post-exploitation implants in React2Shell attacks.
The post Wide Range of Malware Delivered in React2Shell Attacks appeared first on SecurityWeek.
Continue reading Wide Range of Malware Delivered in React2Shell Attacks
The Chrome zero-day does not have a CVE and it’s unclear who reported it and which browser component it affects.
The post Google Patches Mysterious Chrome Zero-Day Exploited in the Wild appeared first on SecurityWeek.
Continue reading Google Patches Mysterious Chrome Zero-Day Exploited in the Wild
Over the past decade, overall funding in Israeli cybersecurity companies has increased by more than 500%, according to YL Ventures.
The post Israeli Cybersecurity Funding Hits $4.4 Billion Record High appeared first on SecurityWeek.
Continue reading Israeli Cybersecurity Funding Hits $4.4 Billion Record High
Veza Security was recently valued at more than $800 million after raising $108 million in Series D funding.
The post ServiceNow to Acquire Identity Security Firm Veza in Reported $1 Billion Deal appeared first on SecurityWeek.
Continue reading ServiceNow to Acquire Identity Security Firm Veza in Reported $1 Billion Deal