Security researchers are raising alarm on an ongoing supply chain attack that uses malicious Python packages to distribute an information stealer.
Cybersecurity M&A Roundup for November 1-15, 2022
Magento Vulnerability Increasingly Exploited to Hack Online Stores
E-commerce malware and vulnerability detection firm Sansec warns of a surge in cyberattacks targeting CVE-2022-24086, a critical mail template vulnerability affecting Adobe Commerce and Magento stores.
US Gov Warning: Start Hunting for Iranian APTs That Exploited Log4j
The U.S. government on Wednesday issued a blunt recommendation for organizations running VMWare Horizon servers: Initiate threat-hunting activities to find and expel Iranian APT actors that used the Log4j crisis to slip undetected into corporate networks.
Cyber Resilience: The New Strategy to Cope With Increased Threats
As part of last month’s Cybersecurity Awareness Month, I was traveling around the globe to provide organizations actionable tips on how to strengthen their cybersecurity posture and allow for accelerated recovery from cyberattacks. Through my conversations with hundreds of analysts, system integrators, and secur
Remote Code Execution Vulnerabilities Found in F5 Products
Researchers at cybersecurity firm Rapid7 have identified several vulnerabilities and other potential security issues affecting F5 products.
Firefox 107 Patches High-Impact Vulnerabilities
Mozilla has announced the release of Firefox 107. The latest version of the popular web browser patches a significant number of vulnerabilities.
Akeyless Raises $65 Million for Secrets Management Tech
Israeli early-stage startup Akeyless has banked a whopping $65 million in venture capital funding to build technology to help businesses manage credentials, certificates, keys and other secrets flowing through multi-cloud environments.
Threat Hunting Summit Virtual Event NOW LIVE
SecurityWeek’s 2022 Threat Hunting Summit is now LIVE! (View agenda)
Holiday Cybersecurity Staffing Levels a Difficult Balancing Act for Companies
The effect of reduced staffing levels doesn’t just attract more cybercriminals, it makes the outcome of attacks more severe













