Virtualization technology giant Citrix on Tuesday scrambled out an emergency patch to cover a zero-day flaw in its networking product line and warned that a Chinese hacking group has already been caught exploiting the vulnerability.
Fortinet Ships Emergency Patch for Already-Exploited VPN Flaw
Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the flaw in the wild.
Proofpoint Buys Deception Tech Startup Illusive Networks
Enterprise security vendor Proofpoint on Monday announced plans to acquire Illusive Networks, a startup that helped pioneer deception technology to help detect data breaches. Financial terms of the planned acquisition were not disclosed.
Google Documents IE Browser Zero-Day Exploited by North Korean Hackers
Google’s Threat Analysis Group (TAG) has shared technical details on an Internet Explorer zero-day vulnerability exploited in attacks by North Korean hacking group APT37.
Big Tech Vendors Object to US Gov SBOM Mandate
The U.S. government’s mandates around the creation and delivery of SBOMs (software bill of materials) to help mitigate supply chain attacks has run into strong objections from big-name technology vendors.
Russian Espionage APT Callisto Focuses on Ukraine War Support Organizations
The Russia-linked cyberespionage group known as Callisto has been observed targeting multiple entities that provide war support for Ukraine, including private companies in the US and Europe.
Iran Arrests News Agency Deputy After Reported Cyberattack
Iran has arrested the deputy chief editor of Fars news agency, state media said, more than a week after the agency was reportedly hit by a cyberattack.
“The deputy head of Fars news agency, Abbas Darvish Tavanger, has been arrested for falsifying news,” state broadcaster IRIB said late Monday.
Amnesty International Canada Says It Was Hacked by Beijing
The Canadian branch of Amnesty International said Monday it was the target of a cyberattack sponsored by China.
The human rights organization said it first detected the breach Oct. 5 and hired forensic investigators and cybersecurity experts to investigate.
Balance Theory Scores Seed Funding for Secure Workspace Collaboration
Balance Theory, a seed-stage startup working on technology to help security teams collaborate and manage data flows securely, has closed a $3 million funding round.
The Columbia, Maryland-based Balance Theory said the early-stage investment was led by DataTribe with participation from TEDCO.
Albanian IT Staff Charged With Negligence Over Cyberattack
Albanian prosecutors on Wednesday asked for the house arrest of five public employees they blame for not protecting the country from a cyberattack by alleged Iranian hackers.












