Latest Cybersecurity News and Articles

---

Xage Targets New Markets with $20 Million Investment

Silicon Valley startup snags $20 million in new capital and announced plans to expand beyond traditional IT environments. The post Xage Targets New Markets with $20 Million Investment appeared first on SecurityWeek.

---

FusionAuth Snags $65 Million Investment for Customer Identity Tech

Colorado startup raises new capital from Updata Partners to build out its customer authentication and authorization technology. The post FusionAuth Snags $65 Million Investment for Customer Identity Tech appeared first on SecurityWeek.

---

Security and privacy ranked second among AI concerns

Consumer trust in artificial intelligence was analyzed in a recent report by dunhumby. Forty-six percent cite security as a grocery use case for AI.

---

Former SpaceX Engineers Get $8 Million in Funding for AI Security Firm Wraithwatch

Former SpaceX cybersecurity engineers launch Wraithwatch, an AI-based security firm that received $8 million in seed funding.  The post Former SpaceX Engineers Get $8 Million in Funding for AI Security Firm Wraithwatch appeared first on SecurityWeek.

---

SolarWinds CISO faces fraud charges for misleading investors

A recent announcement by the SEC reveals SolarWinds Corporation and its CISO are facing charges for fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities related to a 2020 cyberattack.

---

Critical Apache ActiveMQ Vulnerability Exploited to Deliver Ransomware

A recently patched Apache ActiveMQ vulnerability tracked as CVE-2023-46604 is being exploited to deliver ransomware. The post Critical Apache ActiveMQ Vulnerability Exploited to Deliver Ransomware appeared first on SecurityWeek.

---

Mysterious Kill Switch Disrupts Mozi IoT Botnet Operations

The unexpected drop in malicious activity connected with the Mozi botnet in August 2023 was due to a kill switch that was distributed to the bots. "First, the drop manifested in India on August 8," ESET said in an analysis published this week. "A week later, on August 16, the same thing happened in China. While the mysterious control payload – aka kill switch – stripped Mozi bots of most

---

Threat Actors Deploy Malvertising Campaigns to Hijack Facebook Users’ Accounts

The attackers use hijacked Facebook accounts and create multiple profiles featuring photos of young women to entice users to click on infected links. Clicking on the ads downloads a malicious file that steals browser cookies and passwords.

---

FIRST Announces CVSS 4.0 - New Vulnerability Scoring System

The new version addresses criticisms of previous versions by including metrics for safety, automation, recovery, value density, vulnerability response effort, and provider urgency.

---

Ransomware Attack on Texas Mental Healthcare Provider Affects 172,000 Patients

The attack was quickly detected and contained within one segment of the network. The compromised information may include names, addresses, birthdates, Social Security numbers, diagnosis codes, insurance information, and treatment service types.

---

Ransomware Attacks Set to Break Records in 2023

Ransomware attacks are increasing at a record-breaking pace, with the frequency of attacks in Q3 2023 up 11% from the previous quarter and 95% from the previous year, according to Corvus Insurance.

---

Microsoft Temporarily Disables SketchUp Support After Discovery of 117 Vulnerabilities

Zscaler identified 117 vulnerabilities in Microsoft 365’s support for SketchUp files and bypassed initial patches. The post Microsoft Temporarily Disables SketchUp Support After Discovery of 117 Vulnerabilities appeared first on SecurityWeek.

---

Mainframes are Around to Stay, It’s Time to Protect Them

While many organizations still run core business applications on the mainframe, the changing digital landscape and stricter data regulations highlight the need for stronger security practices.

---

Massive Ransomware Attack Hinders Services in 70 German Municipalities

Multiple cities and districts in western Germany have been paralyzed by a ransomware attack. The attack encrypted the servers of the local municipal service provider Südwestfalen IT, affecting over 70 municipalities.

---

European Privacy Officials Widen Ban on Meta’s Behavioral Advertising to Most of Europe

European privacy officials have widened a ban on Meta’s “behavioral advertising” practices to most of Europe. The post European Privacy Officials Widen Ban on Meta’s Behavioral Advertising to Most of Europe appeared first on SecurityWeek.

---

Over 630,000 US Defense Officials’ Emails Breached in Attack on Westat

The attack targeted a data firm called Westat, used by the Office of Personnel Management (OPM) for surveys. The hackers exploited a vulnerability in the MOVEit Transfer software developed by Ipswitch INC.

---

Boeing Confirms Distribution Business Hit by Cyberattack

Boeing has confirmed that parts of its distribution business were hit by a cyberattack after a ransomware group claimed to have breached the company’s systems. The post Boeing Confirms Distribution Business Hit by Cyberattack appeared first on SecurityWeek.

---

AP News Site Hit by Apparent Denial-of-Service Attack

The Associated Press news website experienced an outage that appeared to be consistent with a denial-of-service attack. The post AP News Site Hit by Apparent Denial-of-Service Attack appeared first on SecurityWeek.

---

RansomedVC Gang Up for Sale as Cyber Cops Make Owner Sweat

The RansomedVC group, which recently claimed responsibility for several high-profile attacks, is now up for sale. The owner, citing personal reasons and a desire to avoid monitoring by federal agencies, is offering a 20% discount to a trusted buyer.

---

3,000 Apache ActiveMQ Servers Vulnerable to RCE Attacks Exposed Online

The flaw, known as CVE-2023-46604, allows attackers to execute arbitrary shell commands by exploiting the serialized class types in the OpenWire protocol. The issue affects several versions of Apache ActiveMQ, but patches have been released.