Google Helps OSTIF Boost Security of Open Source Projects

Google this week announced plans to support the Open Source Technology Improvement Fund (OSTIF) to boost the security of open source projects.
read more

Continue reading Google Helps OSTIF Boost Security of Open Source Projects

Google Warns of Exploited Zero-Days in Chrome Browser

Google has joined the list of major software providers scrambling to respond to zero-day exploits in the wild.
read more

Continue reading Google Warns of Exploited Zero-Days in Chrome Browser

CISA, FBI Warn of Increase in Ransomware Attacks on Holidays

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) are warning that ransomware actors are deliberately launching attacks during the holidays and weekends.
read more

Continue reading CISA, FBI Warn of Increase in Ransomware Attacks on Holidays

Trend Micro Confirms In-the-Wild Zero-Day Attacks

Security vendor Trend Micro has issued a warning for in-the-wild zero-day attacks hitting customers using its Apex One and Apex One as a Service products.
read more

Continue reading Trend Micro Confirms In-the-Wild Zero-Day Attacks

Juniper Patches Critical Third-Party Flaws Across Product Portfolio

Juniper Networks has shipped security patches to cover numerous vulnerabilities across its product portfolio, including a series of critical bugs in third-party software used in Juniper’s product portfolio.
read more

Continue reading Juniper Patches Critical Third-Party Flaws Across Product Portfolio

Did Microsoft Botch the PrintNightmare Patch?

Just days after shipping an emergency Windows update to cover a dangerous code execution flaw (CVE-2021-1675) in the Print Spooler service, Microsoft is investigating a new set of claims that its so-called ‘PrintNightmare’ patch has not properly fixed … Continue reading Did Microsoft Botch the PrintNightmare Patch?

AWS Acquires Encrypted Communications Service Wickr

Amazon’s AWS subsidiary on Friday announced the acquisition of Wickr, a late-stage startup that sells end-to-end encrypted communications tools.
Financial terms of the transaction were not released. Prior to the acquisition, Wickr raised a total of … Continue reading AWS Acquires Encrypted Communications Service Wickr

Apple: WebKit Bugs Exploited to Hack Older iPhones

Apple late Monday shipped an out-of-band iOS update for older iPhones and iPads alongside a warning that a pair of WebKit security vulnerabilities may have been actively exploited.
read more

Continue reading Apple: WebKit Bugs Exploited to Hack Older iPhones

Sift Raises $50M at ‘Unicorn’ Valuation

Fraud prevention technology provider Sift is now the 11th cybersecurity company to reach “unicorn” status in 2021, following a new $50 million round of venture capital funding.
read more

Continue reading Sift Raises $50M at ‘Unicorn’ Valuation

Russian Security Vendor Positive Technologies Dropped From MAPP Member List

Following sanctions announced by the U.S. Department of the Treasury last week, Russian cyber-security firm Positive Technologies says the  accusations are groundless.
read more

Continue reading Russian Security Vendor Positive Technologies Dropped From MAPP Member List