SecurityWeek Briefing.

"Senate committee advances Trump nominee to lead CISA."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 31 July 2025, 0002 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

90K followers39 articles per week

#security#tech

66

Today

Senate Committee Advances Trump Nominee to Lead CISA

by Associated Press / 4h

Committee Members voted to recommend Sean Plankey for director of the Cybersecurity and Infrastructure Security Agency. The post appeared first on SecurityWeek .

BlinkOps Raises $50 Million for Agentic Security Automation Platform

BlinkOps raises 50 million

•

by Eduard Kovacs / 9h

BlinkOps has announced a Series B funding round that brings the total raised by the company for its micro-agents builder to $90 million. The post appeared first on SecurityWeek .

Legion Emerges From Stealth With $38 Million in Funding

Legion raises 38 million cybersecurity

•

by Ionut Arghire / 10h

Legion has raised $38 million in seed and Series A funding for its browser-native AI Security Operations Center (SOC) platform. The post appeared first on SecurityWeek .

Join the Dekáf Revolution

by Dekáf Coffee Roasters

sponsored

Dekáf Coffee Roasters: Decaf & low-caff, roasted with intention. Code DK25 for 25% off at dekaf.com

Scattered Spider Activity Drops Following Arrests, but Others Adopting Group’s Tactics

by Ionut Arghire / 10h

Multiple financially motivated threat actors are targeting backup systems and employing Scattered Spider’s social engineering techniques. The post appeared first on SecurityWeek .

Palo Alto Networks to Acquire CyberArk for $25 Billion

by Mike Lennon / 10h

Strategic acquisitions marks Palo Alto Networks' formal entry into the identity security space and accelerates its platform strategy. The post appeared first on SecurityWeek .

Telecom Giant Orange Hit by Cyberattack

Impact (Enterprise TA0040)

•

by Eduard Kovacs / 11h

•

Orange suffers cyberattack disruption

Orange was targeted by hackers in an attack that resulted in the disruption of services offered to corporate and individual customers. The post appeared first on SecurityWeek .

Cyata Emerges From Stealth With $8.5 Million in Funding

by Ionut Arghire / 11h

The Israeli startup helps organizations identify, monitor, and control AI agents across their environments. The post appeared first on SecurityWeek .

Cost of Data Breach in US Rises to $10.22 Million, Says Latest IBM Report

Canadian breach costs increase globally decline

•

by Kevin Townsend / 12h

The global average cost of a breach fell to $4.44 million (the first decline in five years), but the average US cost rose to a record $10.22 million. The post appeared first on SecurityWeek .

Flaw in Vibe Coding Platform Base44 Exposed Private Enterprise Applications

Vibe Coding Platform Security Flaws

•

by Eduard Kovacs / 12h

Base44 owner Wix quickly patched a critical authentication bypass vulnerability discovered by researchers at Wiz. The post appeared first on SecurityWeek .

Minnesota Activates National Guard in Response to Cyberattack

St Paul cyberattack prompts National Guard

•

by Ionut Arghire / 12h

Minnesota Governor Tim Walz called in the National Guard to assist the City of Saint Paul in responding to a cyberattack. The post appeared first on SecurityWeek .

Yesterday

Tonic Security Launches With $7 Million in Seed Funding

by Ionut Arghire / 14h

Tonic Security has emerged from stealth mode to tackle the complexity of exposure and vulnerability management. The post appeared first on SecurityWeek .

Apple Patches Safari Vulnerability Flagged as Exploited Against Chrome

by Ionut Arghire / 15h

Tracked as CVE-2025-6558, the flaw was found in Chrome’s ANGLE and GPU components and was flagged as exploited by Google TAG. The post appeared first on SecurityWeek .

Axonius Acquires Medical Device Security Firm Cynerio in $100 Million Deal

Axonius acquires Cynerio for 180M

•

by Eduard Kovacs / 16h

Axonius has acquired Cynerio for $100 million in cash and stock to accelerate its expansion into the healthcare market. The post appeared first on SecurityWeek .

Tea App Takes Messaging System Offline After Second Security Issue Reported

Tea dating app data leak

•

by Associated Press / 22h

Tea has said about 72,000 images were leaked online in the initial incident, and another 59,000 images publicly viewable in the app from posts, comments and direct messages were also accessed. The post appeared first on SecurityWeek .

Lenovo Firmware Vulnerabilities Allow Persistent Implant Deployment

by Eduard Kovacs / 1d

Vulnerabilities discovered by Binarly in Lenovo devices allow privilege escalation, code execution, and security bypass. The post appeared first on SecurityWeek .

Seal Security Raises $13 Million to Secure Software Supply Chain

by Ionut Arghire / 1d

The open source security firm will use the investment to enhance go-to-market efforts and accelerate platform expansion. The post appeared first on SecurityWeek .

Promptfoo Raises $18.4 Million for AI Security Platform

by Ionut Arghire / 1d

Promptfoo has raised $18.4 million in Series A funding to help organizations secure LLMs and generative AI applications. The post Promptfoo Raises $18.4 Million for AI Security Platform appeared first on SecurityWeek .

Order Out of Chaos – Using Chaos Theory Encryption to Protect OT and IoT

by Kevin Townsend / 1d

The need for secure encryption in IoT and IIoT devices is obvious, and potentially critical for OT and, by extension, much of the critical infrastructure. The post appeared first on SecurityWeek .

Sploitlight: macOS Vulnerability Leaks Sensitive Information

Apple macOS vulnerability exposes sensitive data

•

by Ionut Arghire / 1d

The TCC bypass could expose information cached by Apple Intelligence, including geolocation and biometric data. The post appeared first on SecurityWeek .

Dropzone AI Raises $37 Million for Autonomous SOC Analyst

Dropzone raises 37M for AI SOC

•

by Eduard Kovacs / 1d

Dropzone AI has announced a Series B funding round led by Theory Ventures to boost its AI SOC solution. The post appeared first on SecurityWeek .

From Ex Machina to Exfiltration: When AI Gets Too Curious

by Danelle Au / 1d

From prompt injection to emergent behavior, today’s curious AI models are quietly breaching trust boundaries. The post appeared first on SecurityWeek .

Jul 28, 2025

Organizations Warned of Exploited PaperCut Flaw

by Ionut Arghire / 1d

Threat actors are exploiting a two-year-old vulnerability in PaperCut that allows them to execute arbitrary code remotely. The post appeared first on SecurityWeek .

Fable Security Raises $31 Million for Human Risk Management Platform

by Eduard Kovacs / 1d

Fable Security has emerged from stealth mode with a solution designed to detect risky behaviors and educate employees. The post appeared first on SecurityWeek .

Aanchal Gupta Joins Adobe as Chief Security Officer

by Eduard Kovacs / 1d

Aanchal Gupta has been named CSO at Adobe after holding cybersecurity leadership roles at Microsoft for more than five years. The post appeared first on SecurityWeek .

Creating Realistic Deepfakes Is Getting Easier Than Ever. Fighting Back May Take Even More AI

Deepfakes pose growing security threats

•

by Associated Press / 1d

Deepfakes are causing security problems for governments, businesses and individuals and making trust the most valuable currency of the digital age. The post appeared first on SecurityWeek .

Cyberattack On Russian Airline Aeroflot Causes the Cancellation of More Than 100 Flights

Aeroflot system failure causes disruptions

•

by Associated Press / 1d

Ukrainian and Belarusian hacker groups, which oppose the rule of Belarusian President Alexander Lukashenko, claimed responsibility for the cyberattack. The post appeared first on SecurityWeek .

NASCAR Confirms Personal Information Stolen in Ransomware Attack

by Ionut Arghire / 2d

NASCAR says names, Social Security numbers, and other personal information was stolen in an April 2025 ransomware attack. The post appeared first on SecurityWeek .

Root Evidence Launches With $12.5 Million in Seed Funding

by Ionut Arghire / 2d

Root Evidence is developing fully integrated vulnerability scanning and attack surface management technology. The post appeared first on SecurityWeek .

Scattered Spider Targeting VMware vSphere Environments

by Ionut Arghire / 2d

The financially motivated group is pivoting from Active Directory to VMware vSphere environments, deploying ransomware from the hypervisor. The post appeared first on SecurityWeek .

Allianz Life Data Breach Impacts Most of 1.4 Million US Customers

Allianz Life data breach

•

by Eduard Kovacs / 2d

Allianz subsidiary said the information of customers, financial professionals and employees was compromised as a result of a hack. The post appeared first on SecurityWeek .

BlackSuit Ransomware Group Transitioning to ‘Chaos’ Amid Leak Site Seizure

by Ionut Arghire / 2d

The emerging Chaos ransomware appears to be a rebranding of BlackSuit, which had its leak site seized by law enforcement. The post appeared first on SecurityWeek .

Jul 27, 2025

Flaw Allowing Website Takeover Found in WordPress Plugin With 400k Installations

Post SMTP flaw risks WordPress security

•

20by Eduard Kovacs / 2d

The Post SMTP email delivery WordPress plugin is affected by a critical vulnerability and half of websites using it remain unpatched. The post appeared first on SecurityWeek .

Jul 25, 2025

In Other News: $30k Google Cloud Build Flaw, Louis Vuitton Breach Update, Attack Surface Growth

Louis Vuitton data breach impacts thousands

•

by SecurityWeek News / 5d

Noteworthy stories that might have slipped under the radar: Google Cloud Build vulnerability earns researcher big bounty, more countries hit by Louis Vuitton data breach, organizations’ attack surface is increasing. The post appeared first on SecurityWeek .

Mitel Patches Critical Flaw in Enterprise Communication Platform

by Ionut Arghire / 5d

An authentication bypass vulnerability in Mitel MiVoice MX-ONE could allow attackers to access user or admin accounts on the system. The post appeared first on SecurityWeek .

Sophisticated Koske Linux Malware Developed With AI Aid

AI malware hides in panda images

•

by Eduard Kovacs / 5d

The Koske Linux malware shows how cybercriminals can use AI for payload development, persistence, and adaptivity. The post appeared first on SecurityWeek .

Jul 24, 2025

UK Student Sentenced to Prison for Selling Phishing Kits

by Ionut Arghire / 5d

Ollie Holman was sentenced to prison for selling over 1,000 phishing kits that caused estimated losses of over $134 million. The post appeared first on SecurityWeek .

Chinese Spies Target Networking and Virtualization Flaws to Breach Isolated Environments

by Ionut Arghire / 5d

Chinese cyberespionage group Fire Ant is targeting virtualization and networking infrastructure to access isolated environments. The post appeared first on SecurityWeek .

No Patch for Flaw Exposing Hundreds of LG Cameras to Remote Hacking

by Eduard Kovacs / 5d

LG Innotek LNV5110R security cameras are affected by a vulnerability that can be exploited for unauthenticated remote code execution. The post appeared first on SecurityWeek .

US Targets North Korea’s Illicit Funds: $15M Rewards Offered as American Woman Jailed in IT Worker Scam

by Ionut Arghire / 5d

Christina Chapman was sentenced to prison for helping North Korean IT workers infiltrate US companies and running a laptop farm for them. The post appeared first on SecurityWeek .

HeroDevs Raises $125 Million to Secure Deprecated OSS

HeroDevs secures 125M for legacy OSS

•

by Ionut Arghire / 6d

HeroDevs has received a $125 million strategic growth investment from PSG to secure enterprise security stacks. The post appeared first on SecurityWeek .

New York Seeking Public Opinion on Water Systems Cyber Regulations

New York enhances water cybersecurity

•

by Ionut Arghire / 6d

The proposed cyber regulations include the implementation of incident reporting, response plans, and cybersecurity controls, training, and certification of compliance. The post appeared first on SecurityWeek .

GRC Firm Vanta Raises $150 Million at $4.15 Billion Valuation

Vanta valued at 415 billion

•

by Eduard Kovacs / 6d

Risk management and compliance solutions provider Vanta has raised more than $500 million since 2021. The post appeared first on SecurityWeek .

Clorox Sues Cognizant for $380 Million Over 2023 Hack

by Eduard Kovacs / 6d

Clorox is blaming Congnizat for the 2023 cyberattack, claiming that the IT provided handed over passwords to the hackers. The post appeared first on SecurityWeek .

High-Value NPM Developers Compromised in New Phishing Campaign

Npm packages targeted by phishing

•

by Ionut Arghire / 6d

Hackers have injected malware into popular NPM packages after compromising several developer accounts in a fresh phishing campaign. The post appeared first on SecurityWeek .

SonicWall Patches Critical SMA 100 Vulnerability, Warns of Recent Malware Attack

SonicWall patches SMA 100 flaw

•

by Ionut Arghire / 6d

SonicWall advises organizations to patch SMA 100 appliances and look for IoCs associated with Overstep malware attacks. The post appeared first on SecurityWeek .