Security Week
-
ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities
The unpatched vulnerabilities allow attackers to execute arbitrary code remotely and escalate their privileges.
The post ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities appeared first on SecurityWeek.
-
Apple Bug Bounty Update: Top Payout $2 Million, $35 Million Paid to Date
Apple has announced significant updates to its bug bounty program, including new categories and target flags.
The post Apple Bug Bounty Update: Top Payout $2 Million, $35 Million Paid to Date appeared first on SecurityWeek.
-
Sophisticated Malware Deployed in Oracle EBS Zero-Day Attacks
Google researchers believe exploitation may have started as early as July 10 and the campaign hit dozens of organizations.
The post Sophisticated Malware Deployed in Oracle EBS Zero-Day Attacks appeared first on SecurityWeek.
-
Realm.Security Raises $15 Million in Series A Funding
The cybersecurity startup will use the investment to accelerate its product development and market expansion efforts.
The post Realm.Security Raises $15 Million in Series A Funding appeared first on SecurityWeek.
-
GitHub Copilot Chat Flaw Leaked Data From Private Repositories
Hidden comments allowed full control over Copilot responses and leaked sensitive information and source code.
The post GitHub Copilot Chat Flaw Leaked Data From Private Repositories appeared first on SecurityWeek.
-
Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day
The company said there is no evidence that confidential client data was stolen from its systems.
The post Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day appeared first on SecurityWeek.
-
All SonicWall Cloud Backup Users Had Firewall Configurations Stolen
In early September, hackers stole the firewall configuration backup files stored using the MySonicWall service.
The post All SonicWall Cloud Backup Users Had Firewall Configurations Stolen appeared first on SecurityWeek.
-
Discord Says 70,000 Users Had IDs Exposed in Recent Data Breach
The hackers claim the theft of over 2 million photos of government identification documents provided to Discord for age verification.
The post Discord Says 70,000 Users Had IDs Exposed in Recent Data Breach appeared first on SecurityWeek.
-
AI Takes Center Stage at DataTribe’s Cyber Innovation Day
From defending AI agents to teaching robots to move safely, finalists at this year’s DataTribe Challenge are charting the next frontier in cybersecurity innovation.
The post AI Takes Center Stage at DataTribe’s Cyber Innovation Day appeared first on SecurityWeek.
-
Will AI-SPM Become the Standard Security Layer for Safe AI Adoption?
How security posture management for AI can protect against model poisoning, excessive agency, jailbreaking and other LLM risks.
The post Will AI-SPM Become the Standard Security Layer for Safe AI Adoption? appeared first on SecurityWeek.