SecurityWeek Briefing.

"Qevlar AI raises $10 million for Autonomous Investigation Platform."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on09 April 2025, 1526 UTC.

Content and Source: Email subscription via https://feedly.com.

Please check link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Today

Qevlar AI Raises $10 Million for Autonomous Investigation Platform

Qevlar AI raises 14M$ for cybersecurity

•

by Ionut Arghire / 3h

French cybersecurity startup Qevlar AI has raised $10 million in a funding round led by EQT Ventures and Forgepoint Capital International. The post appeared first on SecurityWeek .

Treasury’s OCC Says Hackers Had Access to 150,000 Emails

Valid Accounts (Enterprise T1078)

•

by Eduard Kovacs / 3h

•

Hackers accessed US bank regulators' emails

The Office of the Comptroller of the Currency (OCC) has disclosed an email security incident in which 100 accounts were compromised for over a year. The post appeared first on SecurityWeek .

CISA Urges Urgent Patching for Exploited CentreStack, Windows Zero-Days

3 TTPs

•

by Ionut Arghire / 4h

•

CVE-2025-30406

CISA has added fresh CentreStack and Windows CLFS vulnerabilities to the Known Exploited Vulnerabilities catalog. The post appeared first on SecurityWeek .

Vulnerabilities Patched by Ivanti, VMware, Zoom

3 TTPs

•

by Ionut Arghire / 4h

Ivanti, VMware, and Zoom released fixes for dozens of vulnerabilities in their products on April 2025 Patch Tuesday. The post appeared first on SecurityWeek .

Fortinet Patches Critical FortiSwitch Vulnerability

2 TTPs

•

by Ionut Arghire / 4h

Fortinet fixes a critical-severity bug in FortiSwitch that could allow an attacker to modify administrative passwords. The post appeared first on SecurityWeek .

Oracle Faces Mounting Criticism as It Notifies Customers of Hack

Collection (Enterprise TA0009)

•

by Eduard Kovacs / 5h

•

Oracle faces criticism over security incidents

Oracle is sending out written notifications to customers over the recent hack after it initially appeared to completely deny a data breach. The post appeared first on SecurityWeek .

Yesterday

ICS Patch Tuesday: Vulnerabilities Addressed by Rockwell, ABB, Siemens, Schneider

3 TTPs

•

by Eduard Kovacs / 6h

•

PatchTuesday

Industrial giants Siemens, Rockwell, Schneider and ABB have released their March 2025 Patch Tuesday ICS security advisories. The post appeared first on SecurityWeek .

Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day

3 TTPs

•

by Ryan Naraine / 20h

•

CVE-2025-29824

Patch Tuesday: Microsoft ships urgent cover for another WIndows CLFS vulnerability already exploited in the wild. The post appeared first on SecurityWeek .

Adobe Calls Urgent Attention to Critical ColdFusion Flaws

2 TTPs

•

by Ryan Naraine / 21h

The Adobe Patch Tuesday rollout covers 54 vulnerabilities, including code execution issues in the oft-targeted Adobe ColdFusion software. The post appeared first on SecurityWeek .

Network Access Vendor Portnox Secures $37.5 Million Investment

Portnox secures 375M Series B

•

by SecurityWeek News / 23h

Texas network access control startup closes a Series B round led by Updata Partners and brings the total raised to $60 million. The post appeared first on SecurityWeek .

Octane Raises $6.75M for Smart Contract Security Tech

Octane raises 675M for crypto security

•

by SecurityWeek News / 23h

San Francisco smart contract security startup closes a $6.75 million seed funding round led by Archetype and Winklevoss Capital. The post appeared first on SecurityWeek .

Vulnerability Management Firm Spektion Emerges From Stealth With $5 Million in Funding

by Eduard Kovacs / 23h

Spektion has emerged from stealth mode with $5 million in seed funding for its vulnerability management solution. The post appeared first on SecurityWeek .

DNS: The Secret Weapon CISOs May Be Overlooking in the Fight Against Cyberattacks

16 TTPs

•

by Danelle Au / 1d

While often relegated to a purely functional role, DNS offers unparalleled opportunities for preemptive defense against cyberattacks. The post appeared first on SecurityWeek .

Anecdotes Raises $30 Million for Enterprise GRC Platform

Anecdotes raises 55M$ Series B

•

by Eduard Kovacs / 1d

Anecdotes has raised $55 million in an extended Series B funding round that brings the total raised by the company to $85 million. The post appeared first on SecurityWeek .

SAP Patches Critical Code Injection Vulnerabilities

by Ionut Arghire / 1d

SAP released 20 security notes on April 2025 patch day, including three addressing critical code injection and authentication bypass flaws. The post appeared first on SecurityWeek .

Aurascape Banks Hefty $50 Million to Mitigate ‘Shadow AI’ Risks

by Ryan Naraine / 1d

Silicon Valley startup secures big investment from Menlo Ventures and Mayfield Fund to solve the “shadow AI” security problem. The post appeared first on SecurityWeek .

WhatsApp Vulnerability Could Facilitate Remote Code Execution

2 TTPs

•

by Eduard Kovacs / 1d

An update for the WhatsApp desktop app for Windows patches CVE-2025-30401, a spoofing vulnerability that could be used to trick users. The post appeared first on SecurityWeek .

ESET Vulnerability Exploited for Stealthy Malware Execution

6 TTPs

•

by Ionut Arghire / 1d

•

CVE-2024-11859

A sophisticated APT tracked as ToddyCat has exploited an ESET DLL search order hijacking vulnerability for malware delivery. The post appeared first on SecurityWeek .

Corsha Raises $18 Million to Enhance and Extend Machine-to-Machine Security

by Kevin Townsend / 1d

The new funds will be used to extend Corsha’s reach into critical infrastructure and further improve its own use of AI. The post appeared first on SecurityWeek .

Tailscale Raises $160 Million for Secure Networking Platform

Tailscale valued at 1.5B$

•

by Eduard Kovacs / 1d

Tailscale’s new Series C funding round brings the total raised by the company for its secure networking platform to $275 million. The post appeared first on SecurityWeek .

Exploited Vulnerability Puts 5,000 Ivanti VPN Appliances at Risk

Execution (Enterprise TA0002)

•

by Ionut Arghire / 1d

•

CVE-2025-22457

More than 5,000 Ivanti Connect Secure appliances are vulnerable to attacks exploiting CVE-2025-22457, which has been used by Chinese hackers. The post appeared first on SecurityWeek .

Android Update Patches Two Exploited Vulnerabilities

by Ionut Arghire / 1d

Android’s latest security update resolves two exploited Kernel vulnerabilities, as well as critical-severity bugs. The post appeared first on SecurityWeek .

Apr 7, 2025

Threat Actors Setting Up Persistent Access to Hosts Hacked in CrushFTP Attacks

3 TTPs

•

by Eduard Kovacs / 1d

Huntress has shared details on the post-exploitation activities of threat actors targeting the recent CrushFTP vulnerability. The post appeared first on SecurityWeek .

Hawaii Cybersecurity Journal