Dropbox Breach Exposes Customer Credentials, Authentication Data

Threat actor dropped in to Dropbox Sign production environment and accessed emails, passwords, and other PII, along with APIs, OAuth, and MFA info.

darkreading – ​Read More

Two years in, Google says passkeys now protect more than 400 million accounts

Google Account users have authenticated themselves using passkeys more than 1 billion times, but passwords are likely to be around for years.

Latest stories for ZDNET in Security – ​Read More

Ransomware Defense Startup Mimic Raises Hefty $27M Seed Round 

A new Silicon Valley startup called Mimic is coming out of the shadows with a hefty $27 million seed-stage funding round led by Ballistic Ventures.

The post Ransomware Defense Startup Mimic Raises Hefty $27M Seed Round  appeared first on SecurityWeek.

SecurityWeek – ​Read More

Popular Android Apps Like Xiaomi, WPS Office Vulnerable to File Overwrite Flaw

Several popular Android applications available in Google Play Store are susceptible to a path traversal-affiliated vulnerability that could be exploited by a malicious app to overwrite arbitrary files in the vulnerable app’s home directory.
“The implications of this vulnerability pattern include arbitrary code execution and token theft, depending on an application’s&nbsp

The Hacker News – ​Read More

The Breach of a Face Recognition Firm Reveals a Hidden Danger of Biometrics

Outabox, an Australian firm that scanned faces for bars and clubs, suffered a breach that shows the problems with giving companies your biometric data.

Security Latest – ​Read More

Name That Edge Toon: Puppet Master

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

darkreading – ​Read More

Building the Right Vendor Ecosystem – a Guide to Making the Most of RSA Conference

As you look to navigate RSA Conference, with so many vendors, approaches and solutions, how do you know what solutions you should be investing in?

The post Building the Right Vendor Ecosystem – a Guide to Making the Most of RSA Conference appeared first on SecurityWeek.

SecurityWeek – ​Read More

AI Security Startup Apex Emerges From Stealth With Funding From OpenAI CEO

Israeli AI security firm Apex has received $7 million in seed funding for its detection, investigation, and response platform.

The post AI Security Startup Apex Emerges From Stealth With Funding From OpenAI CEO appeared first on SecurityWeek.

SecurityWeek – ​Read More

Startup Dealflow: New Investments at Resonance, RunReveal, StepSecurity, Insane Cyber

Cybersecurity startups Insane Cyber, Resonance Security, RunReveal and StepSecurity announce pre-seed, early-stage, and seed funding rounds.

The post Startup Dealflow: New Investments at Resonance, RunReveal, StepSecurity, Insane Cyber appeared first on SecurityWeek.

SecurityWeek – ​Read More

Hackers Target New NATO Member Sweden with Surge of DDoS Attacks

Sweden has faced a wave of distributed denial of service (DDoS) attacks since it started the process of joining NATO, according to network performance management provider Netscout.

Cyware News – Latest Cyber News – ​Read More