BlackBerry Cylance Data Offered for Sale on Dark Web

BlackBerry says the Cylance data offered for sale for $750,000 is old and its own systems have not been compromised. 

The post BlackBerry Cylance Data Offered for Sale on Dark Web appeared first on SecurityWeek.

SecurityWeek – ​Read More

Supreme Court Will Take Up Meta’s Bid to End Lawsuit Over Cambridge Analytica Privacy Scandal

The Supreme Court will take up Meta’s bid to end the lawsuit over the Cambridge Analytica privacy scandal.

The post Supreme Court Will Take Up Meta’s Bid to End Lawsuit Over Cambridge Analytica Privacy Scandal appeared first on SecurityWeek.

SecurityWeek – ​Read More

Top 10 Critical Pentest Findings 2024: What You Need to Know

One of the most effective ways for information technology (IT) professionals to uncover a company’s weaknesses before the bad guys do is penetration testing. By simulating real-world cyberattacks, penetration testing, sometimes called pentests, provides invaluable insights into an organization’s security posture, revealing weaknesses that could potentially lead to data breaches or other security

The Hacker News – ​Read More

SAP Patches High-Severity Vulnerabilities in Financial Consolidation, NetWeaver

SAP has released 10 new security notes on June 2024 Security Patch Day, including two addressing high-severity vulnerabilities.

The post SAP Patches High-Severity Vulnerabilities in Financial Consolidation, NetWeaver appeared first on SecurityWeek.

SecurityWeek – ​Read More

Dangerous Liaisons: The Interaction Between Threat Actors and High-Risk Devices

Forescout’s 2024 analysis of the riskiest devices highlights vulnerabilities and threat actor interactions across IT, IoT, OT, and IoMT.

The post Dangerous Liaisons: The Interaction Between Threat Actors and High-Risk Devices appeared first on SecurityWeek.

SecurityWeek – ​Read More

Apple Integrates OpenAI’s ChatGPT into Siri for iOS, iPadOS, and macOS

Apple has announced the launch of a “groundbreaking cloud intelligence system” called Private Cloud Compute (PCC) that’s designed for processing artificial intelligence (AI) tasks in a privacy-preserving manner in the cloud.
The tech giant described PCC as the “most advanced security architecture ever deployed for cloud AI compute at scale.”
PCC coincides with the arrival of new generative AI (

The Hacker News – ​Read More

Xona Raises $18 Million for OT Remote Access Platform

OT zero trust user access platform provider Xona has raised $18 million, which brings its total investment to $32 million.

The post Xona Raises $18 Million for OT Remote Access Platform appeared first on SecurityWeek.

SecurityWeek – ​Read More

Arm Warns of Exploited Kernel Driver Vulnerability

Arm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks.

The post Arm Warns of Exploited Kernel Driver Vulnerability appeared first on SecurityWeek.

SecurityWeek – ​Read More

China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics

Cybersecurity researchers have uncovered an updated version of malware called ValleyRAT that’s being distributed as part of a new campaign.
“In the latest version, ValleyRAT introduced new commands, such as capturing screenshots, process filtering, forced shutdown, and clearing Windows event logs,” Zscaler ThreatLabz researchers Muhammed Irfan V A and Manisha Ramcharan Prajapati said.
ValleyRAT

The Hacker News – ​Read More

Snowflake Breach Exposes 165 Customers’ Data in Ongoing Extortion Campaign

As many as 165 customers of Snowflake are said to have had their information potentially exposed as part of an ongoing campaign designed to facilitate data theft and extortion, indicating the operation has broader implications than previously thought.
Google-owned Mandiant, which is assisting the cloud data warehousing platform in its incident response efforts, is tracking the

The Hacker News – ​Read More