SecurityWeek Briefing.

"Google's $32 Billion Wiz deal draws DOJ antitrust scrutiny."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondent.  Accessed on 16 June 2025, 2350 UTC.

Content and Source:  "SecurityWeek Briefing."

Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check mail link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

88K followers39 articles per week

#security#tech

39

Today

Google’s $32 Billion Wiz Deal Draws DOJ Antitrust Scrutiny: Report

Google's Wiz acquisition faces antitrust review

•

by SecurityWeek News / 8h

According to reports, the US Department of Justice will assess whether the deal would harm competition in the cybersecurity market. The post appeared first on SecurityWeek .

Archetyp Dark Web Market Shut Down by Law Enforcement

Archetyp Market dismantled by police

•

by Eduard Kovacs / 10h

The Archetyp Market drug marketplace has been targeted by law enforcement in an operation involving takedowns and arrests. The post appeared first on SecurityWeek .

Asheville Eye Associates Says 147,000 Impacted by Data Breach

2 TTPs

•

by Ionut Arghire / 11h

Asheville Eye Associates says the personal information of 147,000 individuals was stolen in a November 2024 data breach. The post appeared first on SecurityWeek .

Zoomcar Says Hackers Accessed Data of 8.4 Million Users

Zoomcar reports data breach

•

by Eduard Kovacs / 11h

The Indian car sharing marketplace Zoomcar learned that its systems were hacked after a threat actor contacted employees. The post appeared first on SecurityWeek .

240,000 Impacted by Data Breach at Eyecare Tech Firm Ocuco

Ocuco data breach affects 240000

•

by Eduard Kovacs / 12h

The KillSec ransomware group has stolen hundreds of gigabytes of data from Ireland-based eyecare technology company Ocuco. The post appeared first on SecurityWeek .

Anubis Ransomware Packs a Wiper to Permanently Delete Files

8 TTPs

•

by Ionut Arghire / 13h

•

Anubis ransomware adds wiper feature

The emerging Anubis ransomware becomes a major threat, permanently deleting user files and making recovery impossible. The post appeared first on SecurityWeek .

Red Teaming AI: The Build Vs Buy Debate

Red teaming AI for safer models

•

by Matt Honea / 13h

A strong AI deployment starts with asking the right questions, mapping your risks, and thinking like an adversary — before it’s too late. The post appeared first on SecurityWeek .

Yesterday

High-Severity Vulnerabilities Patched in Tenable Nessus Agent

3 TTPs

•

by Ionut Arghire / 14h

Three high-severity Tenable Agent vulnerabilities could allow users to overwrite and delete files, or execute arbitrary code, with System privileges. The post appeared first on SecurityWeek .

Canadian Airline WestJet Hit by Cyberattack

WestJet faces cybersecurity incident

•

by Ionut Arghire / 15h

A cybersecurity incident at WestJet resulted in users experiencing interruptions when accessing the company’s application and website. The post appeared first on SecurityWeek .

Jun 13, 2025

In Other News: Cloudflare Outage, Cracked.io Users Identified, Victoria’s Secret Cyberattack Cost

by SecurityWeek News / 3d

Noteworthy stories that might have slipped under the radar: Cloudflare outage not caused by cyberattack, Dutch police identified 126 users of Cracked.io, the Victoria’s Secret cyberattack has cost $10 million. The post appeared first on SecurityWeek .

TeamFiltration Abused in Entra ID Account Takeover Campaign

8 TTPs

•

by Ionut Arghire / 3d

•

TeamFiltration targets Microsoft Entra IDs

Threat actors have abused the TeamFiltration pentesting framework to target over 80,000 Entra ID user accounts. The post appeared first on SecurityWeek .

Industry Reactions to Trump Cybersecurity Executive Order: Feedback Friday

Trump signs cybersecurity executive order

•

by Eduard Kovacs / 3d

Industry professionals comment on the Trump administration’s new executive order on cybersecurity. The post appeared first on SecurityWeek .

SimpleHelp Vulnerability Exploited Against Utility Billing Software Users

by Ionut Arghire / 3d

CISA warns that vulnerable SimpleHelp RMM instances have been exploited against a utility billing software provider’s customers. The post appeared first on SecurityWeek .

Fog Ransomware Attack Employs Unusual Tools

10 TTPs

•

by Ionut Arghire / 3d

Multiple legitimate, unusual tools were used in a Fog ransomware attack, including one employed by Chinese hacking group APT41. The post appeared first on SecurityWeek .

Jun 12, 2025

Critical Vulnerability Exposes Many Mitel MiCollab Instances to Remote Hacking

2 TTPs

•

by Eduard Kovacs / 3d

Mitel has announced patches for a MiCollab path traversal vulnerability that can be exploited remotely without authentication. The post appeared first on SecurityWeek .

Critical Vulnerabilities Patched in Trend Micro Apex Central, Endpoint Encryption

3 TTPs

•

by Ionut Arghire / 3d

Trend Micro patches critical-severity Apex Central and Endpoint Encryption PolicyServer flaws leading to remote code execution. The post appeared first on SecurityWeek .

ZeroRISC Raises $10 Million for Open Source Silicon Security Solutions

ZeroRISC raises 10M for security

•

by Eduard Kovacs / 3d

ZeroRISC has raised $10 million in seed funding for production-grade open source silicon security, built on OpenTitan designs. The post appeared first on SecurityWeek .

Paragon ‘Graphite’ Spyware Linked to Zero-Click Hacks on Newest iPhones

3 TTPs

•

by Ryan Naraine / 4d

•

CVE-2025-43200

Citizen Lab publishes forensic proof that spyware maker Paragon can compromise up-to-date iPhones. Journalists in Europe among victims. The post appeared first on SecurityWeek .

The AI Arms Race: Deepfake Generation vs. Detection

by Kevin Townsend / 4d

AI-generated voice deepfakes have crossed the uncanny valley, fueling a surge in fraud that outpaces traditional security measures. Detection technology is racing to keep up. The post appeared first on SecurityWeek .

Hirundo Raises $8 Million to Eliminate AI’s Bad Behavior

Hirundo raises 8M for AI

•

by Ionut Arghire / 4d

Hirundo tackles AI hallucinations and bias by making trained models “forget” poisoned, malicious, and confidential data. The post appeared first on SecurityWeek .

New ‘SmartAttack’ Steals Air-Gapped Data Using Smartwatches

SmartAttack exploits smartwatches for data theft

•

by Ionut Arghire / 4d

The new attack technique uses smartwatches to capture ultrasonic covert communication in air-gapped environments and exfiltrate data. The post appeared first on SecurityWeek .

‘EchoLeak’ AI Attack Enabled Theft of Sensitive Data via Microsoft 365 Copilot

6 TTPs

•

by Eduard Kovacs / 4d

•

CVE-2025-32711

Microsoft recently patched CVE-2025-32711, a vulnerability that could have been used for zero-click attacks to steal data from Copilot. The post appeared first on SecurityWeek .

The ZTNA Blind Spot: Why Unmanaged Devices Threaten Your Hybrid Workforce

by Etay Maor / 4d

It’s time for enterprises to stop treating unmanaged devices as an edge case and start securing them as part of a unified Zero Trust strategy. The post appeared first on SecurityWeek .

Surge in Cyberattacks Targeting Journalists: Cloudflare

by Ionut Arghire / 4d

Between May 2024 and April 2025, Cloudflare blocked 109 billion malicious requests targeting organizations protected under Project Galileo. The post appeared first on SecurityWeek .

Jun 11, 2025

Palo Alto Networks Patches Privilege Escalation Vulnerabilities

2 TTPs

•

by Ionut Arghire / 4d

Palo Alto Networks has released patches for seven vulnerabilities and incorporated the latest Chrome fixes in its products. The post appeared first on SecurityWeek .

Interpol Targets Infostealers: 20,000 IPs Taken Down, 32 Arrested, 216,000 Victims Notified

by Eduard Kovacs / 4d

Interpol has announced a crackdown on infostealer malware in Asia as part of an effort called Operation Secure. The post appeared first on SecurityWeek .

With Retail Cyberattacks on the Rise, Customers Find Orders Blocked and Shelves Empty

by Associated Press / 4d

Beyond potentially halting sales of physical goods, breaches can expose customers’ personal data to future phishing or fraud attempts. The post appeared first on SecurityWeek .

Securonix Acquires Threat Intelligence Firm ThreatQuotient

Securonix acquires ThreatQuotient for integration

•

by SecurityWeek News / 5d

Cybersecurity heavyweight Securonix acquires ThreatQuotient to boost plans to build an all-in-one security operations stack. The post appeared first on SecurityWeek .

Maze Banks $25M to Tackle Cloud Security With AI Agents

Maze raises 31M for AI security

•

by SecurityWeek News / 5d

Maze and its investors are betting on finding profits in software that uses AI-powered agents to automate critical parts of the process. The post appeared first on SecurityWeek .

Flaw in Industrial Computer Maker’s UEFI Apps Enables Secure Boot Bypass on Many Devices

5 TTPs

•

by Eduard Kovacs / 5d

Vulnerable DTResearch UEFI firmware applications can be used in BYOVD attacks to bypass Secure Boot. The post appeared first on SecurityWeek .

Webcast Video: Rethinking Endpoint Hardening for Today’s Attack Landscape

by SecurityWeek News / 5d

Learn how attackers hide in plain sight—and what you can do to stop them without slowing down your business. The post appeared first on SecurityWeek .

Fortinet, Ivanti Patch High-Severity Vulnerabilities

4 TTPs

•

by Ionut Arghire / 5d

Patches released by Fortinet and Ivanti resolve over a dozen vulnerabilities, including high-severity flaws leading to code execution, credential leaks. The post appeared first on SecurityWeek .

40,000 Security Cameras Exposed to Remote Hacking

Over 40000 security cameras exposed

•

by Ionut Arghire / 5d

Bitsight has identified over 40,000 security cameras that can be easily hacked for spying or other types of malicious activity. The post appeared first on SecurityWeek .

Recently Disrupted DanaBot Leaked Valuable Data for 3 Years

4 TTPs

•

by Eduard Kovacs / 5d

•

DanaBot C2 server vulnerabilities exposed

Investigators leveraged a vulnerability dubbed DanaBleed to obtain insights into the internal operations of the DanaBot botnet. The post appeared first on SecurityWeek .

Cyera Raises $540 Million to Expand AI-Powered Data Security Platform

Cyera raises 540M at 6B$

•

by Mike Lennon / 5d

Series E funding round brings Cyera’s total funding to over $1.3 billion and values the data security firm at $6 billion. The post appeared first on SecurityWeek .

Horizon3.ai Raises $100 Million in Series D Funding

Horizon3.ai raises 100M dollars

•

by Ionut Arghire / 5d

Horizon3.ai has raised $100 million to expand product capabilities, and to scale its partner ecosystem and federal market presence. The post appeared first on SecurityWeek .

Rethinking Success in Security: Why Climbing the Corporate Ladder Isn’t Always the Goal

by Joshua Goldfarb / 5d

Many security professionals feel pressured to pursue leadership roles, but success can also mean going deeper, not just higher. The post appeared first on SecurityWeek .

Chrome, Firefox Updates Resolve High-Severity Memory Bugs

by Ionut Arghire / 5d

Google and Mozilla have released patches for a combined total of four high-severity memory bugs in Chrome and Firefox. The post appeared first on SecurityWeek .

Jun 10, 2025

ICS Patch Tuesday: Vulnerabilities Addressed by Siemens, Schneider, Aveva, CISA

6 TTPs

•

by Eduard Kovacs / 5d

•

CVE-2025-40585

Industrial solutions providers Siemens, Schneider Electric and Aveva have released June 2025 Patch Tuesday ICS security advisories. The post appeared first on SecurityWeek .

End of feed