SecurityWeek Briefing.

"SailPoint IPO signals bright spot for cybersecurity."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 16 February 2025, 1424 UTC.

Content and Source:  Email subscription via https://feedly.com.

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

 SecurityWeek

84K followers48 articles per week

#security#tech

31

Feb 14, 2025

SailPoint IPO Signals Bright Spot for Cybersecurity

SailPoint IPO raises 1.38 billion

•

by SecurityWeek News / 1d

In a signal move for the cybersecurity sector, identity and access management (IAM) vendor SailPoint has made its return to public markets. The post appeared first on SecurityWeek .

Virginia Attorney General’s Office Struck by Cyberattack Targeting Attorneys’ Computer Systems

Virginia AG's office cyberattack reported

•

by Associated Press / 1d

The chief deputy attorney general of the agency sent an email on Wednesday that said nearly all of is computer systems were offline. The post appeared first on SecurityWeek .

Sean Cairncross is Trump Nominee for National Cyber Director

Trump nominates Sean Cairncross

•

by Ryan Naraine / 1d

Former RNC official Sean Cairncross has been nominated for the post of National Cyber Director to streamline the US cybersecurity strategy. The post appeared first on SecurityWeek .

Rising Tides: Lesley Carhart on Bridging Enterprise Security and OT—and Improving the Human Condition

by Jennifer Leggio / 2d

In the latest edition of “Rising Tides” we talk with Lesley Carhart, Technical Director of Incident Response at Dragos. The post appeared first on SecurityWeek .

Meta Paid Out Over $2.3 Million in Bug Bounties in 2024

by Ionut Arghire / 2d

Meta received close to 10,000 vulnerability reports and paid out over $2.3 million in bug bounty rewards in 2024. The post appeared first on SecurityWeek .

In Other News: $10,000 YouTube Flaw, Cybereason CEO Sues Investors, New OT Security Tool

7 TTPs

•

by SecurityWeek News / 2d

Noteworthy stories that might have slipped under the radar: Google pays $10,000 bug bounty for YouTube vulnerability, Cybereason CEO sues two investors, Otorio launches new OT security tool. The post appeared first on SecurityWeek .

SonicWall Firewall Vulnerability Exploited After PoC Publication

2 TTPs

•

by Ionut Arghire / 2d

The exploitation of a recent SonicWall vulnerability has started shortly after proof-of-concept (PoC) code was published. The post appeared first on SecurityWeek .

Salt Typhoon Targeting Old Cisco Vulnerabilities in Fresh Telecom Hacks

4 TTPs

•

by Ionut Arghire / 2d

China-linked APT Salt Typhoon has been exploiting known vulnerabilities in Cisco devices in attacks on telecom providers in the US and abroad. The post appeared first on SecurityWeek .

New Windows Zero-Day Exploited by Chinese APT: Security Firm

9 TTPs

•

by Eduard Kovacs / 2d

ClearSky Cyber Security says it has seen a new Windows zero-day being exploited by a Chinese APT named Mustang Panda. The post appeared first on SecurityWeek .

SGNL Raises $30 Million for Identity Management Solution

SGNL raises 30M for identity security

•

by Ionut Arghire / 2d

Identity management provider SGNL has raised $30 million in a Series A funding round led by Brightmind Partners. The post appeared first on SecurityWeek .

Hackers Exploit Palo Alto Firewall Vulnerability Day After Disclosure

Palo Alto Networks PAN-OS vulnerabilities

•

by Eduard Kovacs / 2d

Attempts to exploit CVE-2024-0108, an authentication bypass vulnerability in Palo Alto firewalls, started one day after disclosure. The post appeared first on SecurityWeek .

Feb 13, 2025

Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation

6 TTPs

•

by Ryan Naraine / 2d

Rapid7 finds a new zero-day vulnerability in PostgreSQL and links it to chain of attacks against a BeyondTrust Remote Support product. The post appeared first on SecurityWeek .

Google Hub in Poland to Develop AI Use in Energy and Cybersecurity Sectors

Google partners with Poland on AI

•

by Associated Press / 2d

Poland is being targeted by various forms of cyberattacks and sabotage actions believed to be sponsored by Russia. The post appeared first on SecurityWeek .

Circuit Board Maker Unimicron Targeted in Ransomware Attack

3 TTPs

•

by Eduard Kovacs / 2d

•

Unimicron suffers Sarcoma ransomware attack

The Sarcoma ransomware group is threatening to leak data stolen from Taiwanese printed circuit board manufacturer Unimicron. The post appeared first on SecurityWeek .

CyberArk Expands Identity Security Play With $165M Acquisition of Zilla Security

CyberArk acquires Zilla Security

•

by Ryan Naraine / 2d

CyberArk acquires early stage Boston startup Zilla Security for $165M, expanding its identity security and IGA capabilities. The post appeared first on SecurityWeek .

DeepSeek Exposes Major Cybersecurity Blind Spot

by Torsten George / 2d

Millions of uninformed users have flocked to DeepSeek and share personal information without considering security or privacy risks. The post appeared first on SecurityWeek .

Chinese Cyberspy Possibly Launching Ransomware Attacks as Side Job

8 TTPs

•

by Ionut Arghire / 3d

A toolset associated with China-linked espionage intrusions was employed in a ransomware attack, likely by a single individual. The post appeared first on SecurityWeek .

SecurityWeek Analysis: Over 400 Cybersecurity M&A Deals Announced in 2024

by Eduard Kovacs / 3d

An analysis conducted by SecurityWeek shows that 405 cybersecurity-related mergers and acquisitions were announced in 2024. The post appeared first on SecurityWeek .

Jscrambler Raises $5.2 Million for Code, Webpage Protection Solution

Jscrambler raises 5.2M funding

•

by Ionut Arghire / 3d

Jscrambler has received a $5.2 million investment from Iberis Capital to accelerate innovation and research. The post appeared first on SecurityWeek .

Palo Alto Networks Patches Potentially Serious Firewall Vulnerability

2 TTPs

•

by Eduard Kovacs / 3d

Palo Alto Networks has published 10 new security advisories, including one for a high-severity firewall authentication bypass vulnerability. The post appeared first on SecurityWeek .

Exploitation of Old ThinkPHP, OwnCloud Vulnerabilities Surges

2 TTPs

•

by Ionut Arghire / 3d

Threat actors are increasingly exploiting two old vulnerabilities in ThinkPHP and OwnCloud in their attacks. The post appeared first on SecurityWeek .

Google Pays Out $55,000 Bug Bounty for Chrome Vulnerability

2 TTPs

•

by Ionut Arghire / 3d

Google has released a Chrome 133 update to address four high-severity vulnerabilities reported by external researchers. The post appeared first on SecurityWeek .

Feb 12, 2025

Italian Government Denies It Spied on Journalists and Migrant Activists Using Paragon Spyware

Paragon spyware targets activists journalists

•

by Associated Press / 3d

The Italian government denied it hacked seven cellphones with military-grade surveillance technology from Paragon Solutions. The post appeared first on SecurityWeek .

QuSecure Banks $28M Series A for Post-Quantum Cryptography Tech

QuSecure raises 28M for PQC

•

by Ryan Naraine / 3d

QuSecure is pitching a software-based security architecture that overlays onto current networks to help businesses with PQC migration. The post appeared first on SecurityWeek .

Russian Seashell Blizzard Hackers Have Access to Critical Infrastructure: Microsoft

12 TTPs

•

by Ionut Arghire / 3d

•

H-16-056

A subgroup of the Russia-linked Seashell Blizzard is tasked with broad initial access operations to sustain long-term persistence. The post appeared first on SecurityWeek .

Drata to Acquire SafeBase in $250 Million Deal

Drata acquires SafeBase for Trust Management

•

by Eduard Kovacs / 4d

Security and compliance automation firm Drata has acquired trust center platform SafeBase in a quarter billion dollar deal. The post appeared first on SecurityWeek .

Ivanti, Fortinet Patch Remote Code Execution Vulnerabilities

3 TTPs

•

by Ionut Arghire / 4d

Ivanti and Fortinet on Tuesday released patches for multiple critical- and high-severity vulnerabilities in their products. The post appeared first on SecurityWeek .

GAO Tells Coast Guard to Improve Cybersecurity of Maritime Transportation System

Coast Guard finalizes maritime cybersecurity rule

•

by Ionut Arghire / 4d

A new GAO report assesses that the Coast Guard needs to improve Maritime Transportation System (MTS) cybersecurity. The post appeared first on SecurityWeek .

Chipmaker Patch Tuesday: Intel, AMD, Nvidia Fix High-Severity Vulnerabilities

5 TTPs

•

by Eduard Kovacs / 4d

•

PatchTuesday

Chipmakers Intel, AMD and Nvidia on Tuesday published new security advisories to inform customers about vulnerabilities found in their products. The post appeared first on SecurityWeek .

Cisco Says Ransomware Group’s Leak Related to Old Hack

Exfiltration (Enterprise TA0010)

•

by Ionut Arghire / 4d

•

Cisco suffers ransomware data breach

A fresh post on the Kraken ransomware group’s leak website refers to data stolen in a 2022 cyberattack, Cisco says. The post appeared first on SecurityWeek .