Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3804 articles
AWS re:Invent announcements include organization-wide resource controls, security settings for EC2, VPC public-access blocking, and centrally managed root access, alongside other security-related cloud features.
Darktrace says IDC’s 2024 worldwide NDR vendor assessment positioned it as a Leader. The company highlights its self-learning AI, network detection and autonomous response capabilities.
Wiz describes how its Defend product correlates cloud risk, runtime and audit-log data to investigate threats, citing PAN-OS exploitation and Wiz telemetry on vulnerable, exposed appliances.
Darktrace reported a 692% rise in Black Friday and Cyber Monday-themed phishing emails compared with early November, alongside increased brand impersonation and warnings about seasonal attacks.
Wiz announced the public preview of Wiz Defend, a cloud detection and response product that combines telemetry, threat detection, investigation context, and response automation for SecOps teams.
A curated roundup covers espionage and malware campaigns, phishing using SVG attachments, alleged data theft and extortion, and law-enforcement action against the RedLine and META infostealer operations.
Wiz announced plans to acquire Dazz, aiming to combine Dazz’s application-risk remediation capabilities with Wiz’s cloud security platform and help teams address vulnerabilities at their source.
KuppingerCole’s 2024 NDR Leadership Compass recognized Darktrace as an Overall, Product, Market and Innovation Leader. Darktrace highlights its AI-driven network detection, investigation and response capabilities.
Wiz and AWS announce an Amazon Q Developer plugin that lets developers query Wiz cloud security posture and prioritize risks directly in the AWS console.
DarkOwl reported election-related disinformation and dark-web posts claiming to offer Georgia police emails and voter data. The offers’ authenticity was not established; analysts said exposed personal data could be used for hacking or phishing.
Huntress Managed SAT added leaderboards that score training and simulated-phishing behaviors, manager alerts for incomplete assignments, and a dashboard with completion and phishing-compromise metrics.
A proposed US bill would require healthcare organizations to meet cybersecurity standards, undergo annual audits and stress tests, and face stronger penalties for noncompliance. The article links the proposal to attacks disrupting care and exposing patient data.
Team Cymru says its Internet telemetry and threat-research teams helped INTERPOL’s Operation Synergia II identify and disrupt cybercrime infrastructure. INTERPOL reported 41 arrests, 59 server seizures and 65 people under investigation.
DarkOwl’s roundup summarizes October cybersecurity news, including U.S. and Microsoft domain seizures, law-enforcement actions against cybercrime suspects and markets, and reports on new malware, a botnet and a China-aligned threat actor.
Brazilian authorities announced an arrest in a case involving alleged hacks of the Federal Police and other institutions. DarkOwl connects the case to USDoD, a prolific BreachForums user, but the article notes uncertainty about the suspect’s identity.
Wiz says its runtime sensor now supports AWS Fargate and Azure Container Apps, using ptrace to monitor container processes without host access and offering threat detection, response, and runtime hunting.
DarkOwl analysts discuss foreign and domestic actors spreading election disinformation across dark-web-adjacent and mainstream platforms, describe key narratives and risks, and recommend verifying sources and fact-checking.
Team Cymru announced a Palo Alto-certified Scout content pack for Cortex XSOAR, bringing IP and domain intelligence—including NetFlow, Whois, passive DNS, X.509 certificates and fingerprinting data—into investigation and response workflows.
Wiz says its new Okta support provides visibility into identities and cloud permissions, flags excessive access and misconfigurations, maps cloud attack paths, and detects threats such as MFA deactivation and MFA-enumeration brute force.
A court ruling requires Google to allow third-party app stores through Google Play for three years. ThreatFabric warns that fragmented oversight could make it easier for malicious apps to reach users.
A Group-IB investigation helped law enforcement dismantle a Southeast Asian network that used fake Android apps and phishing sites to steal banking credentials and defraud victims of more than $25 million. Arrests were made across the region.
Australia’s Scam Prevention Framework outlines mandatory scam controls for financial institutions, telcos and digital platforms, with penalties for non-compliance and possible victim reimbursement. The article contrasts it with the UK approach.
Wiz says its eBPF-based runtime sensor is now available in Wiz for Gov, adding runtime monitoring, detection, response and investigation capabilities for government cloud workloads.
Wiz describes how it says its products and processes address CISA’s Secure by Design commitments, including authentication controls, memory-safe languages, customer audit logs, software supply-chain safeguards and vulnerability reporting.
