Collaborate Disseminate
The startup’s platform functions as a secure control layer, aiming to secure AI tools across enterprises.
The post Runlayer Raises $30 Million in Series A Funding appeared first on SecurityWeek.
Continue reading Runlayer Raises $30 Million in Series A Funding
The latest GitLab CE/EE updates address 13 vulnerabilities, including three high-severity defects.
The post GitLab Patches Code Execution, Information Disclosure Vulnerabilities appeared first on SecurityWeek.
Continue reading GitLab Patches Code Execution, Information Disclosure Vulnerabilities
The latest version of the open source data transfer tool resolves 18 medium and low-severity vulnerabilities.
The post 25-Year-Old Vulnerability Patched in Curl appeared first on SecurityWeek.
Continue reading 25-Year-Old Vulnerability Patched in Curl
The guidance aims to establish product cybersecurity requirements for IoT devices integrated into federal agencies’ networks.
The post NIST Opens Updated IoT Security Guidance to Public Review appeared first on SecurityWeek.
Continue reading NIST Opens Updated IoT Security Guidance to Public Review
More than half of the bugs are use-after-free defects, which can potentially lead to remote code execution.
The post Chrome 149 Update Resolves 18 Severe Vulnerabilities appeared first on SecurityWeek.
Continue reading Chrome 149 Update Resolves 18 Severe Vulnerabilities
The flaws allow remote, unauthenticated attackers to make system changes, access underlying accounts, and inject commands.
The post Critical Ubiquiti Vulnerabilities in Attackers’ Crosshairs appeared first on SecurityWeek.
Continue reading Critical Ubiquiti Vulnerabilities in Attackers’ Crosshairs
Mistic is used by Woodgnat, an initial access broker working with Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta.
The post New ‘Mistic’ RAT Opens Door to Several Ransomware Families appeared first on SecurityWeek.
Continue reading New ‘Mistic’ RAT Opens Door to Several Ransomware Families
The security defects allow unauthenticated users to take control of the open source software supply chain.
The post Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking appeared first on SecurityWeek.
Continue reading Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking
Over a dozen Klue customers have confirmed that hackers stole data from their Salesforce instances.
The post BeyondTrust, LastPass Impacted by Klue-Salesforce Incident appeared first on SecurityWeek.
Continue reading BeyondTrust, LastPass Impacted by Klue-Salesforce Incident
Attackers could abuse Dify’s multi-tenant cloud service to read private chats, preview other tenants’ documents, and reach internal APIs.
The post Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps appeared first on SecurityWeek.
Continue reading Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps