Enterprise AI Security Firm TrojAI Raises $5.75M in Seed Funding

TrojAI, a provider of enterprise AI security solutions, announced a $5.75 million funding round of additional seed capital and the appointment of Lee Weiner as CEO.

The post Enterprise AI Security Firm TrojAI Raises $5.75M in Seed Funding appeared first on SecurityWeek.

SecurityWeek – ​Read More

Best Privacy Browsers (2024): Brave, Safari, Ghostery, Firefox, DuckDuckGo

Ad trackers are out of control. Use a browser that reins them in.

Security Latest – ​Read More

House to Take up Bill to Reauthorize Crucial US Spy Program as Expiration Date Looms

Section 702 of the Foreign Intelligence Surveillance Act expires on April 19.

The post House to Take up Bill to Reauthorize Crucial US Spy Program as Expiration Date Looms appeared first on SecurityWeek.

SecurityWeek – ​Read More

Browsing in Incognito Mode Doesn’t Protect You as Much as You Might Think

Incognito modes generally do not prevent the websites you visit from seeing your location, via your IP address, or stop your internet service provider from logging your activities.

The post Browsing in Incognito Mode Doesn’t Protect You as Much as You Might Think appeared first on SecurityWeek.

SecurityWeek – ​Read More

Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites

Threat actors have been found exploiting a critical flaw in Magento to inject a persistent backdoor into e-commerce websites.
The attack leverages CVE-2024-20720 (CVSS score: 9.1), which has been described by Adobe as a case of “improper neutralization of special elements” that could pave the way for arbitrary code execution.
It was addressed by the company as part of

The Hacker News – ​Read More

Identity Thief Lived as a Different Man for 33 Years

Plus: Microsoft scolded for a “cascade” of security failures, AI-generated lawyers send fake legal threats, a data broker quietly lobbies against US privacy legislation, and more.

Security Latest – ​Read More

Phishing Attacks Targeting Political Parties, Germany Warns

“An increase of attacks can currently be assumed, particularly in light of the upcoming European elections. These may include phishing attacks to publish stolen data or documents,” a BSI spokesperson told Information Security Media Group.

Cyware News – Latest Cyber News – ​Read More

New HTTP/2 DoS Attack can Crash Web Servers with a Single TCP Connection

Newly discovered HTTP/2 protocol vulnerabilities called “CONTINUATION Flood” can lead to denial of service (DoS) attacks, crashing web servers with a single TCP connection in some implementations.

Cyware News – Latest Cyber News – ​Read More

Vietnamese Threat Actor Targeting Financial Data Across Asia

Vietnamese financially motivated hackers are targeting businesses across Asia in a campaign to harvest corporate credentials and financial data for resale in online criminal markets.

Cyware News – Latest Cyber News – ​Read More

New Latrodectus Malware Replaces IcedID in Network Breaches

While similar to IcedID, Proofpoint researchers confirmed it is an entirely new malware, likely created by the IcedID developers. Latrodectus shares infrastructure overlap with historic IcedID operations.

Cyware News – Latest Cyber News – ​Read More