Malware hunters at Volexity are raising the alarm for a Chinese threat actor seen exploiting a zero-day flaw in the Zimbra email platform to infect media and government targets in Europe.
Volexity Warns of ‘Active Exploitation’ of Zimbra Zero-Day
1,300 Malicious Packages Found in Popular npm JavaScript Package Manager
Malicious actors are using the npm registry as the start point for open source software (OSS) supply chain attacks.
Open source software offers huge potential for criminals and nation states to deliver widespread supply chain attacks. OSS registries provide a major feeding ground with easy access.
Attack Surface Management Play Censys Scores $35M Investment
The jostling for space in the attack surface management space intensified this week with Michigan startup Censys banking a new $35 million funding round to fuel growth and expansion.
White House Publishes Federal Zero Trust Strategy
Software Supply Chain Protection Startup Scribe Security Raises $7 Million
Scribe Security, an Israeli startup seeking to protect the software supply chain, has raised $7 million in seed funding.
The investment round was led by Elron Ventures and received participation from various other investors, including Tal Ventures and YYM Ventures.
Apple Patches ‘Actively Exploited’ iOS Security Flaw
Apple late Wednesday pushed out an urgent iOS update with fixes for 11 documented security flaws and warned that one of the vulnerabilities “may have been actively exploited.”
In a barebones advisory, Apple acknowledged the zero-day took aim at a memory corruption issue in IOMobileFrameBuffer, an oft-targeted iOS kernel extension.
Slim.AI Raises $31 Million to Secure Cloud-Native Applications
Cloud-native application security startup Slim.AI today announced that it has raised $31 million in Series A funding, which brings the total raised by the company to $37.6 million.
UK’s NCSC Pushes NMAP Scanner Scripts to Fill Defender Gap
The U.K. government’s cybersecurity agency has announced plans to ship a collection of well-tested, reliable scanning scripts to help defenders find and fix high-priority software security vulnerabilities.
PrinterLogic Patches Code Execution Flaws in Printer Management Suite
PrinterLogic has released security updates to address a total of nine vulnerabilities in Web Stack and Virtual Appliance, including three security defects that carry “high severity” ratings.
Application Security Company ArmorCode Raises $8 Million
Application security startup ArmorCode today announced that it has received $8 million in additional seed funding, which brings the total raised by the company to $11 million.
The funding round was led by Cervin Ventures and received participation from Sierra Ventures, Tau Ventures, and founders of Demisto and RedLock.
