"Astra, Invary raise millions for AI-powered Pentesting, Runtime Security."

Views expressed in this cybersecurity, cybercrime, and security update are those of the reporters and correspondents.  Accessed on 06 February 2025, 1557 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

84K followers49 articles per week#security#tech

37

Today

Astra, Invary Raise Millions for AI-Powered Pentesting, Runtime Security

Astra Security raises 2.7M$ funding

•

by Ionut Arghire / 2h

Astra Security and Invary have received new funding to fuel development of their vulnerability scanning and runtime security solutions. The post appeared first on SecurityWeek .

Hacker Who Targeted NATO, US Army Arrested in Spain

Spanish hacker arrested for NATO attacks

•

by Eduard Kovacs / 2h

Spanish authorities have arrested an individual who allegedly hacked several high-profile organizations, including NATO and the US army. The post appeared first on SecurityWeek .

Five Eyes Agencies Release Guidance on Securing Edge Devices

2 TTPs

•

by Ionut Arghire / 3h

Five Eyes cybersecurity agencies have released guidance on securing edge devices against increasing threats. The post appeared first on SecurityWeek .

Security Teams Pay the Price: The Unfair Reality of Cyber Incidents

by Joshua Goldfarb / 3h

The blame of security incidents may be shared—but the burden of response always falls on the security team. Here’s how to prepare for the inevitable. The post appeared first on SecurityWeek .

Cisco Patches Critical Vulnerabilities in Enterprise Management Product

5 TTPs

•

by Ionut Arghire / 4h

Critical vulnerabilities in Cisco Identity Services Engine could lead to elevation of privileges and system configuration modifications. The post appeared first on SecurityWeek .

Fake DeepSeek Sites Used for Credential Phishing, Crypto Theft, Scams

IoC > 1 domain

•

by Eduard Kovacs / 4h

•

6 TTPs

Researchers see dozens of fake DeepSeek websites used for credential phishing, cryptocurrency theft, and scams. The post appeared first on SecurityWeek .

7AI Launches With $36 Million in Seed Funding for Agentic Security Platform

7AI launches agentic security platform

•

by Eduard Kovacs / 5h

7AI has launched an agentic security platform, which uses AI agents to handle repetitive tasks. The post appeared first on SecurityWeek .

Yesterday

Semgrep Raises $100M for AI-Powered Code Security Platform

Semgrep raises 100M Series D

•

by SecurityWeek News / 18h

San Francisco application security startup raises $100 million in a Series D funding round led by Menlo Ventures. The post appeared first on SecurityWeek .

Researchers Link DeepSeek’s Blockbuster Chatbot to Chinese Telecom Banned From Doing Business in US

DeepSeek disrupts AI market dynamics

•

by Associated Press / 18h

DeepSeek has computer code that could send some user login information to China Mobile. The post appeared first on SecurityWeek .

How Agentic AI will be Weaponized for Social Engineering Attacks

by Stu Sjouwerman / 23h

With each passing year, social engineering attacks are becoming bigger and bolder thanks to rapid advancements in artificial intelligence. The post appeared first on SecurityWeek .

Hacker Conversations: David Kennedy – an Atypical Typical Hacker

by Kevin Townsend / 1d

David Kennedy is a hacker. There is no doubt about that. He has qualities common among hackers, but also many differences. The post appeared first on SecurityWeek .

Cyber Insights 2025: OT Security

by Kevin Townsend / 1d

Just as OT technology differs from IT technology, the threats, likely adversaries, and potential harm also differ. The post appeared first on SecurityWeek .

Cybersecurity M&A Roundup: 45 Deals Announced in January 2025

by Eduard Kovacs / 1d

A significant number of cybersecurity-related merger and acquisition (M&A) deals announced in January 2025. The post appeared first on SecurityWeek .

Riot Raises $30 Million for Employee Cybersecurity Solution

Riot raises 30M for cybersecurity

•

by Ionut Arghire / 1d

Riot has raised $30 million in Series B funding for a platform that helps employees improve their cybersecurity posture. The post appeared first on SecurityWeek .

Abandoned Amazon S3 Buckets Enabled Attacks Against Governments, Big Firms

2 TTPs

•

by Eduard Kovacs / 1d

•

Abandoned S3 buckets pose security risks

150 abandoned Amazon S3 buckets could have been leveraged to deliver malware or backdoors to governments and Fortune companies. The post appeared first on SecurityWeek .

Russian Hackers Exploited 7-Zip Zero-Day Against Ukraine

5 TTPs

•

by Ionut Arghire / 1d

•

CVE-2025-0411

Russian threat groups have been observed exploiting a zero-day vulnerability in 7-Zip against Ukrainian entities. The post appeared first on SecurityWeek .

Chrome 133, Firefox 135 Patch High-Severity Vulnerabilities

4 TTPs

•

by Ionut Arghire / 1d

Chrome 133 and Firefox 135 were released with patches for multiple high-severity memory safety vulnerabilities. The post appeared first on SecurityWeek .

CISA Issues Exploitation Warning for .NET Vulnerability

2 TTPs

•

by Eduard Kovacs / 1d

CISA has added CVE-2024-29059, a flaw affecting Microsoft .NET, to its Known Exploited Vulnerabilities catalog. The post appeared first on SecurityWeek .

Zyxel Issues ‘No Patch’ Warning for Exploited Zero-Days

7 TTPs

•

by Ionut Arghire / 1d

Multiple Zyxel legacy DSL CPE products are affected by exploited zero-day vulnerabilities that will not be patched. The post appeared first on SecurityWeek .

Feb 4, 2025

Sophos Completes Acquisition of Secureworks

Sophos acquires Secureworks for $859M

•

by SecurityWeek News / 1d

Sophos has completed its $859 million all-cash acquisition of SecureWorks. The post appeared first on SecurityWeek .

Exploitation of Over 700 Vulnerabilities Came to Light in 2024

768 CVEs exploited in 2024

•

by Ionut Arghire / 1d

The number of vulnerabilities first reported as exploited surged last year amid a decrease in zero-day reports. The post appeared first on SecurityWeek .

Webinar Today: Defenders on the Frontline – Incident Response and Threat Intel Under the Microscope

by SecurityWeek News / 1d

Join this panel of CISOs and threat-intel professionals for a deep-dive on aligning incident response and threat intelligence with broader business objectives. The post appeared first on SecurityWeek .

22 New Mac Malware Families Seen in 2024

7 TTPs

•

by Eduard Kovacs / 1d

Nearly two dozen new macOS malware families were observed in 2024, including stealers, backdoors, downloaders and ransomware. The post appeared first on SecurityWeek .

AMD Patches CPU Vulnerability That Could Break Confidential Computing Protections

CVE-2024-56161

•

by Ionut Arghire / 2d

AMD has released patches for a microprocessor vulnerability found by Google that could allow an attacker to load malicious microcode. The post appeared first on SecurityWeek .

Personal Information Compromised in GrubHub Data Breach

GrubHub data breach affects users

•

by Eduard Kovacs / 2d

Food delivery firm GrubHub has disclosed a data breach impacting the personal information of drivers and customers. The post appeared first on SecurityWeek .

Cyber Insights 2025: The CISO Outlook

by Kevin Townsend / 2d

There has never been a single job description for the CISO – the role depends upon each company, its maturity, its size and resources, and the risk tolerance of boards. The post appeared first on SecurityWeek .

Developers Targeted With Malware Disguised as DeepSeek Package

2 TTPs

•

by Eduard Kovacs / 2d

•

Malicious packages exploit DeepSeek popularity

Python developers looking to integrate DeepSeek into their projects were targeted with malicious packages delivered through PyPI. The post appeared first on SecurityWeek .

Contec Patient Monitors Not Malicious, but Still Pose Big Risk to Healthcare

4 TTPs

•

by Ionut Arghire / 2d

The Contec CMS8000 patient monitors do not contain a malicious backdoor but are plagued by an insecure and vulnerable design. The post appeared first on SecurityWeek .

Vulnerability Patched in Android Possibly Exploited by Forensic Tools

by Ionut Arghire / 2d

The February 2025 Android patches resolve 46 vulnerabilities, including a Linux kernel bug that has been exploited in the wild. The post appeared first on SecurityWeek .