Biztonsági szemle

SiliconAngle reports that cyber incident response provider Coveware has been purchased by Veeam in a bid to improve response to ransomware attacks.

New proposed commercial surveillance regulations are poised to be unveiled by the Federal Trade Commission in the next few months amid concerns of misuse and data security gaps, reports The Record, a news site by cybersecurity firm Recorded Future.

Organizations around the world have improved their cyber incident detection capabilities last year, with median dwell times dropping to 10 days, which is the lowest in a decade, and internal compromise detection rates rising from 37% in 2022 to 46%...

SecurityWeek reports that Siemens has confirmed that its Ruggedcom APE1808 devices configured with a Palo Alto Networks virtual next-generation firewall may be impacted by the actively exploited Palo Alto Networks firewall vulnerability, tracked as...

Threat actors could potentially launch a software supply chain attack by exploiting a dependency confusion flaw impacting the archived Apache Cordova App Harness project, which had been discontinued five years ago, reports The Hacker News.

Operations at major medical diagnosis service provider Synlab Italia's laboratories, medical centers, and sampling points have been disrupted by a cyberattack on April 18, which initially temporarily interrupted telephone and computer access before...

This month the NTT Group combined the services of NTT Ltd. and NTT DATA to form NTT DATA, Inc., marking a significant milestone in the technology services industry and offering a deeper partnership between Cisco and NTT.

A state-sponsored hacking team employed a clever masquerade and elaborate back-end infrastructure as part of a five-year info-stealing campaign that compromised the US State and Treasury Departments, and hundreds of thousands of accounts overall.

Intrusions hijacking the eScan antivirus software's updating mechanism have been conducted by threat actors suspected to be linked to North Korean advanced persistent threat operation Kimsuky to facilitate the delivery of the sophisticated GuptiMiner...

North Korean state-sponsored advanced persistent threat operations Lazarus Group, Kimsuky, and Andariel were noted by South Korea's National Police Agency to have targeted several South Korean defense industry entities since late 2022 in a bid to...

Attacks increased by "only" 19% last year. But that number is expected to grow significently.

An exploit for the vulnerability allows unauthenticated attackers to escape a virtual file system sandbox to download system files and potentially achieve RCE.