Broadcom Patches VMware Aria Flaws – Exploits May Lead to Credential Theft

/in

Broadcom has released security updates to patch five security flaws impacting VMware Aria Operations and Aria Operations for Logs, warning customers that attackers could exploit them to gain elevated access or obtain sensitive information.
The list of identified flaws, which impact versions 8.x of the software, is below –

CVE-2025-22218 (CVSS score: 8.5) – A malicious actor with View Only Admin

The Hacker News – ​Read More

Clutch Security Raises $20 Million for Non-Human Identity Protection Platform

/in

Clutch Security has raised $20 million in a Series A funding round led by SignalFire to secure non-human identities.

The post Clutch Security Raises $20 Million for Non-Human Identity Protection Platform appeared first on SecurityWeek.

SecurityWeek – ​Read More

Trump Administration Faces Security Balancing Act in Borderless Cyber Landscape

/in

What challenges will the new administration face and what might President Trump’s record on cybersecurity indicate about the likely approach in 2025 and beyond?

The post Trump Administration Faces Security Balancing Act in Borderless Cyber Landscape appeared first on SecurityWeek.

SecurityWeek – ​Read More

DeepSeek AI Leaks Over a Million Chat Logs and Sensitive Data Online

/in

DeepSeek, a Chinese AI startup, exposed sensitive data by leaving a database open. Wiz Research found chat logs, keys, and backend details accessible.

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Healthcare Sector Charts 2 More Ransomware Attacks

/in

No ransomware groups have yet to claim responsibility for either attack, and both institutions have yet to reveal what may have been stolen.

darkreading – ​Read More

AngelSense exposed location data and personal information of tracked users

/in

The exposed database was connected to the internet without a password, exposing GPS coordinates, names, phone numbers, and postal addresses.

© 2024 TechCrunch. All rights reserved. For personal use only.

Security News | TechCrunch – ​Read More

Justice Department Sues to Block $14 Billion Juniper Buyout by Hewlett Packard Enterprise

/in

The lawsuit said that the combination of businesses would eliminate competition, raise prices and reduce innovation.

The post Justice Department Sues to Block $14 Billion Juniper Buyout by Hewlett Packard Enterprise appeared first on SecurityWeek.

SecurityWeek – ​Read More

VMware Patches High-Risk Flaws in Oft-Targeted Aria Operations Products

/in

VMWare calls attention to patches for multiple ‘high-risk’ security defects in its Aria Operations and Aria Operations for Logs products.

The post VMware Patches High-Risk Flaws in Oft-Targeted Aria Operations Products appeared first on SecurityWeek.

SecurityWeek – ​Read More

DeepSeek Locked Down Public Database Access That Exposed Chat History

/in

Research Firm Wiz Research began investigating DeepSeek soon after its generative AI took the tech world by storm.

Security | TechRepublic – ​Read More

US Justice Department says cybercrime forum allegedly affected 17 million Americans

/in

U.S. prosecutors accused an Argentinian national living in Spain of being an “active administrator” of Nulled, one of the two hacking forums seized and shut down by authorities.

© 2024 TechCrunch. All rights reserved. For personal use only.

Security News | TechCrunch – ​Read More