Over 22,000 CyberPanel instances exposed online to a critical remote code execution (RCE) vulnerability were mass-targeted in a PSAUX ransomware attack that took almost all instances offline. […]
QNAP fixes NAS backup software zero-day exploited at Pwn2Own
QNAP has fixed a critical zero-day vulnerability exploited by security researchers on Thursday to hack a TS-464 NAS device during the Pwn2Own Ireland 2024 competition. […]
Proofpoint to Acquire Data Security Posture Management Firm Normalyze
Enterprise cybersecurity giant Proofpoint is acquiring data security posture management (DSPM) company Normalyze.
The post Proofpoint to Acquire Data Security Posture Management Firm Normalyze appeared first on SecurityWeek.
RedLine and Meta Infostealers Disrupted by Law Enforcement
Authorities announce server shutdowns, domain seizures, and arrests in RedLine and Meta infostealers takedown operation.
The post RedLine and Meta Infostealers Disrupted by Law Enforcement appeared first on SecurityWeek.
Russian charged by U.S. for creating RedLine infostealer malware
The United States announced charges today against Maxim Rudometov, a Russian national, for being the suspected developer and administrator of the RedLine malware operation, one of the most prolific infostealers over the past few years. […]
Researchers Uncover Vulnerabilities in Open-Source AI and ML Models
A little over three dozen security vulnerabilities have been disclosed in various open-source artificial intelligence (AI) and machine learning (ML) models, some of which could lead to remote code execution and information theft.
The flaws, identified in tools like ChuanhuChatGPT, Lunary, and LocalAI, have been reported as part of Protect AI’s Huntr bug bounty platform.
The most severe of the
The flaws, identified in tools like ChuanhuChatGPT, Lunary, and LocalAI, have been reported as part of Protect AI’s Huntr bug bounty platform.
The most severe of the
Zenity Raises $38 Million to Secure Agentic AI
Agentic AI security startup Zenity has raised $38 million in a Series B funding round led by Third Point Ventures and DTCP.
The post Zenity Raises $38 Million to Secure Agentic AI appeared first on SecurityWeek.
CISA Releases Its First Ever International Strategic Plan
A Sherlock Holmes Approach to Cybersecurity: Eliminate the Impossible with Exposure Validation
Sherlock Holmes is famous for his incredible ability to sort through mounds of information; he removes the irrelevant and exposes the hidden truth. His philosophy is plain yet brilliant: “When you have eliminated the impossible, whatever remains, however improbable, must be the truth.” Rather than following every lead, Holmes focuses on the details that are needed to move him to the solution.
In
In
Dutch Police Disrupt Major Info Stealers RedLine and MetaStealer in Operation Magnus
The Dutch National Police, along with international partners, have announced the disruption of the infrastructure powering two information stealers tracked as RedLine and MetaStealer.
The takedown, which took place on October 28, 2024, is the result of an international law enforcement task force codenamed Operation Magnus that involved authorities from the U.S., the U.K., Belgium, Portugal, and
The takedown, which took place on October 28, 2024, is the result of an international law enforcement task force codenamed Operation Magnus that involved authorities from the U.S., the U.K., Belgium, Portugal, and