SecurityWeek Briefing.

"Tech giants propose standard for end-of-life security disclosures."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.          

Content and Source:  Email subscription to https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check email link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

87K followers47 articles per week

#security#tech

51

Today

Tech Giants Propose Standard For End-of-Life Security Disclosures

by Ryan Naraine / 19min

The OpenEoX model proposes a shared data format that can be integrated into SBOMs, security advisories, and other ecosystem tools. The post appeared first on SecurityWeek .

RSA Conference 2025 Announcement Summary (Day 2)

CrowdStrike launches Charlotte AI innovations

•

by SecurityWeek News / 4h

Hundreds of companies are showcasing their products and services this week at the 2025 edition of the RSA Conference in San Francisco. The post appeared first on SecurityWeek .

Meta Releases Llama AI Open Source Protection Tools

Meta launches LlamaFirewall for AI security

•

by Ionut Arghire / 4h

Meta has released new Llama protection tools to help the open source AI community build more secure applications. The post appeared first on SecurityWeek .

France Blames Russia for Cyberattacks on Dozen Entities

9 TTPs

•

by Ionut Arghire / 5h

•

France accuses Russia of cyber attacks

France says the Russian state-sponsored group APT28 is responsible for targeting or compromising a dozen French entities. The post appeared first on SecurityWeek .

Yesterday

AirPlay Vulnerabilities Expose Apple Devices to Zero-Click Takeover

7 TTPs

•

by Ionut Arghire / 7h

Vulnerabilities in Apple’s AirPlay protocol could have allowed attackers to execute code remotely without user interaction. The post appeared first on SecurityWeek .

Chrome 136, Firefox 138 Patch High-Severity Vulnerabilities

2 TTPs

•

by Ionut Arghire / 8h

Chrome 136 and Firefox 138 were released in the stable channel with patches for multiple high-severity vulnerabilities. The post appeared first on SecurityWeek .

How Do You Know If You’re Ready for a Red Team Partnership?

by Trevin Edgeworth / 23h

Before engaging in a full-scope exercise, it’s important to assess whether your program, people and processes are truly ready. The post appeared first on SecurityWeek .

SentinelOne’s Purple AI Athena Brings Autonomous Decision-Making to the SOC

Anomali and SentinelOne launch agentic AI

•

by Kevin Townsend / 23h

Athena marks a major leap in SOC automation, enabling real-time detection, triage, and remediation with minimal human oversight. The post appeared first on SecurityWeek .

China’s Secret Weapon? How EV Batteries Could Be Weaponized to Disrupt America

by Kevin Townsend / 1d

As Xi Jinping advances his vision for China’s dominance by 2049, cybersecurity experts warn that connected technologies—like EV batteries—may quietly serve as tools of influence, espionage, and disruption. The post appeared first on SecurityWeek .

Pistachio Raises $7 Million for Cybersecurity Training Platform

Pistachio raises 7M$ Series A

•

by Ionut Arghire / 1d

Cybersecurity awareness training platform Pistachio has raised $7 million in a Series A funding round led by Walter Ventures. The post appeared first on SecurityWeek .

LayerX Raises $11 Million for Browser Security Solution

LayerX secures 11M$ funding extension

•

by Ionut Arghire / 1d

Browser security firm LayerX has raised $11 million in a Series A funding round extension led by Jump Capital. The post appeared first on SecurityWeek .

Cybersecurity Firms Raise Over $1.7 Billion Ahead of RSA Conference 2025

RSA Conference 2025 showcases cybersecurity

•

by Mike Lennon / 1d

More than 30 companies announced a total of $1.7 billion in funding in weeks leading up to the industry’s largest gathering. The post appeared first on SecurityWeek .

Google Tracked 75 Zero-Days in 2024

3 TTPs

•

by Eduard Kovacs / 1d

The number of exploited zero-days seen by Google in 2024 dropped to 75, from 98 observed in the previous year. The post appeared first on SecurityWeek .

RSA Conference 2025 Announcements Summary (Day 1)

CrowdStrike launches Charlotte AI innovations

•

by SecurityWeek News / 1d

Hundreds of companies are showcasing their products and services this week at the 2025 edition of the RSA Conference in San Francisco. The post appeared first on SecurityWeek .

Exploited Vulnerability Exposes Over 400 SAP NetWeaver Servers to Attacks

4 TTPs

•

by Ionut Arghire / 1d

•

CVE-2025-31324

More than 400 SAP NetWeaver servers are impacted by CVE-2025-31324, an exploited remote code execution vulnerability. The post appeared first on SecurityWeek .

Apr 28, 2025

CISA Warns of Exploited Broadcom, Commvault Vulnerabilities

4 TTPs

•

by Ionut Arghire / 1d

CISA urges immediate patching for recently disclosed Broadcom, Commvault, and Qualitia vulnerabilities exploited in the wild. The post appeared first on SecurityWeek .

IBM’s $150 Billion US Investment to Boost Quantum Innovation and National Security

IBM invests 150B in America

•

by SecurityWeek News / 1d

IBM will invest more than $30 billion in research and development to advance and continue its American manufacturing of mainframe and quantum computers. The post appeared first on SecurityWeek .

Palo Alto Networks to Acquire AI Security Firm Protect AI

Palo Alto Networks acquires Protect AI

•

by Eduard Kovacs / 1d

Palo Alto Networks is acquiring AI security company Protect AI in a deal previously estimated at $650-700 million. The post appeared first on SecurityWeek .

NetFoundry Raises $12 Million for Network Security Solutions

NetFoundry raises 12 million dollars

•

by Ionut Arghire / 1d

Zero-trust network security solutions provider NetFoundry has raised $12 million in funding from SYN Ventures. The post appeared first on SecurityWeek .

JPMorgan Chase CISO Fires Warning Shot Ahead of RSA Conference

by Ryan Naraine / 1d

This tension between hard-edged risk realism and breathless AI evangelism sets an unmistakable tone for a bellwether conference where 40,000-plus gather to do business. The post appeared first on SecurityWeek .

Veza Banks $108 Million Series D at $808 Million Valuation

Veza partners with GuidePoint Security

•

by SecurityWeek News / 2d

San Francisco identity security play Veza closes a Series D fund round led by New Enterprise Associates (NEA). The post appeared first on SecurityWeek .

Craft CMS Zero-Day Exploited to Compromise Hundreds of Websites

3 TTPs

•

by Ionut Arghire / 2d

•

CVE-2025-32432

Threat actors have exploited a zero-day vulnerability in Craft CMS to execute PHP code on hundreds of websites. The post appeared first on SecurityWeek .

4 Million Affected by VeriSource Data Breach

Exfiltration (Enterprise TA0010)

•

by Ionut Arghire / 2d

VeriSource Services says the personal information of 4 million people was compromised in a February 2024 cyberattack. The post appeared first on SecurityWeek .

Critical Vulnerabilities Found in Planet Technology Industrial Networking Products

5 TTPs

•

by Eduard Kovacs / 2d

Planet Technology industrial switches and network management products are affected by several critical vulnerabilities. The post appeared first on SecurityWeek .

RSA Conference 2025 – Pre-Event Announcements Summary (Part 3)

CrowdStrike launches Charlotte AI innovations

•

by SecurityWeek News / 2d

Hundreds of companies are showcasing their products and services this week at the 2025 edition of the RSA Conference in San Francisco. The post appeared first on SecurityWeek .

Apr 27, 2025

African Telecom Giant MTN Group Discloses Data Breach

MTN reports cybersecurity incident customer data

•

by Ionut Arghire / 2d

MTN Group says the personal information of certain customers was compromised in a cybersecurity incident. The post appeared first on SecurityWeek .

Oregon Agency Won’t Say If Hackers Stole Data in Cyberattack

3 TTPs

•

by Associated Press / 2d

•

Oregon DEQ recovers from cyberattack

Oregon’s environmental agency won’t say if a group of hackers stole data in a cyberattack that was first announced earlier this month. The post appeared first on SecurityWeek .

Apr 26, 2025

Cynomi Raises $37 Million Series B to Expand Its vCISO Platform

Cynomi raises 37M$ Series B

•

by SecurityWeek News / 4d

Cynomi announced a new $37 million Series B funding to grow its AI-powered vCISO platform for MSPs and MSSPs. The post appeared first on SecurityWeek .

Apr 25, 2025

Browser Security Firm SquareX Raises $20 Million

SquareX raises 20M for browser security

•

by SecurityWeek News / 4d

SquareX offers what it has dubbed a “Browser Detection and Response (BDR)” solution. The post appeared first on SecurityWeek .

Former Google Cloud CISO Phil Venables Joins Ballistic Ventures

Phil Venables joins Ballistic Ventures

•

by SecurityWeek News / 5d

Venables has served as CISO and security executive across several large organizations, including Google Cloud, Goldman Sachs, Deutsche Bank. The post appeared first on SecurityWeek .

Lattica Emerges From Stealth With FHE Platform for AI

Lattica secures funding for FHE

•

by Eduard Kovacs / 5d

Lattica has raised $3.25 million in pre-seed funding for a platform that uses FHE to enable AI models to process encrypted data. The post appeared first on SecurityWeek .

M-Trends 2025: State-Sponsored IT Workers Emerge as Global Threat

Mandiant reports evolving cyber threats

•

by Kevin Townsend / 5d

Mandiant’s latest threat report shows how attackers adapt faster than defenses, shifting strategies toward credential theft and insider threats. The post appeared first on SecurityWeek .

Inside the Verizon 2025 DBIR: Five Trends That Signal a Shift in the Cyber Threat Economy

by Danelle Au / 5d

With over 12,000 breaches analyzed, this year’s DBIR reveals a landscape shaped by not just individual threats, but by entire economies of compromise. The post appeared first on SecurityWeek .

Scamnetic Raises $13 Million to Prevent Scams in Real Time

Scamnetic raises 13M for AI defense

•

by Ionut Arghire / 5d

AI-powered threat protection startup Scamnetic has raised $13 million in a Series A funding round led by Roo Capital. The post appeared first on SecurityWeek .

Manifest Raises $15 Million for SBOM Management Platform

by Ionut Arghire / 5d

Software and AI supply chain transparency firm Manifest has raised $15 million in a Series A funding round led by Ensemble VC. The post appeared first on SecurityWeek .

In Other News: Prison for Disney Hacker, MITRE ATT&CK v17, Massive DDoS Botnet

by SecurityWeek News / 5d

Noteworthy stories that might have slipped under the radar: former Disney employee sent to prison for hacking, MITRE releases ATT&CK v17, DDoS botnet powered by 1.3 million devices. The post appeared first on SecurityWeek .

South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days

9 TTPs

•

by Ionut Arghire / 5d

•

Lazarus targets South Korean supply chains

Multiple South Korean organizations across industries have been targeted in a recent Lazarus campaign dubbed Operation SyncHole. The post appeared first on SecurityWeek .

RSA Conference 2025 – Pre-Event Announcements Summary (Part 2)

CrowdStrike launches Charlotte AI innovations

•

by SecurityWeek News / 5d

Hundreds of companies are showcasing their products and services next week at the 2025 edition of the RSA Conference in San Francisco. The post appeared first on SecurityWeek .