The US Cybersecurity and Infrastructure Security Agency (CISA) has warned organizations about two actively exploited VMware product vulnerabilities, and the agency believes two other freshly patched flaws will also be exploited soon.
Microsoft Teams Exploits Earn Hackers $450,000 at Pwn2Own 2022
Vulnerability researchers earned a total of $800,000 on the first day of the Pwn2Own Vancouver 2022 hacking contest, including $450,000 for exploits targeting Microsoft Teams.
Cornami Raises $68 Million for Quantum Secure Computing on Encrypted Data
Cornami, a company that helps organizations encrypt data to keep it safe from post-quantum threats, this week announced that it has raised $68 million in an oversubscribed Series C funding round. To date, the company has raised over $150 million.
US Government Says North Korean IT Workers Enable DPRK Hacking Operations
The US government has warned companies that some of their IT workers may be from North Korea, and these individuals could be aiding their country’s hacking operations.
Now Live: SecurityWeek Threat Intelligence Summit Virtual Event
The Vulnerable Maritime Supply Chain – a Threat to the Global Economy
National Cybersecurity Agencies Describe Commonly Used Initial Access Techniques
Cybersecurity agencies in the United States, the United Kingdom, Canada, the Netherlands, and New Zealand warn that threat actors exploit poor security practices for initial access to victim environments.
Over 380,000 Kubernetes API Servers Exposed to Internet: Shadowserver
The Shadowserver Foundation has started scanning the internet for Kubernetes API servers and found roughly 380,000 that allow some form of access.
ShadowServer is conducting daily scans of the IPv4 space on ports 443 and 6443, looking for IP addresses that respond with an HTTP 200 OK status, which indicates that the request has succeeded.
Carlyle to Acquire Defense Contractor ManTech in $4.2 Billion Deal
Private equity firm Carlyle is acquiring US defense contractor ManTech International Corporation in an all-cash deal valued at roughly $4.2 billion.
NVIDIA Patches Code Execution Vulnerabilities in Graphics Driver
NVIDIA has announced the roll-out of updates for its graphics drivers to address multiple vulnerabilities, including four CVEs rated “high severity.”














