PAM company Delinea over the weekend rushed to patch a critical authentication bypass vulnerability after it apparently ignored the researcher who found the flaw. The post Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt appeared first on SecurityWeek. Original link(Originally posted by Eduard Kovacs)

Cisco Duo warns that breach exposed phone numbers, phone carriers, metadata and other logs that could lead to downstream social engineering attacks. The post Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs appeared first on SecurityWeek. Original link(Originally posted by Ryan Naraine)

NightVision, an early stage startup in the application security testing space, has raised $5.4 million in seed funding. The post NightVision Raises $5.4 Million for Application Security Testing appeared first on SecurityWeek. Original link(Originally posted by Ionut Arghire)

The Dark Angels (Dunghill) ransomware group claims to have stolen 1 Tb of data from Nexperia, which is investigating the incident. The post Ransomware Group Claims Theft of Data From Chipmaker Nexperia  appeared first on SecurityWeek. Original link(Originally posted by Eduard Kovacs)

Juniper Networks patches dozens of vulnerabilities in Junos OS, Junos OS Evolved, and other products. The post Juniper Networks Publishes Dozens of New Security Advisories appeared first on SecurityWeek. Original link(Originally posted by Ionut Arghire)

ICS malware Fuxnet allegedly used by Ukrainian Blackjack group to disrupt industrial sensors and other systems belonging to a Moscow infrastructure firm. The post Destructive ICS Malware ‘Fuxnet’ Used by Ukraine Against Russian Infrastructure appeared first on SecurityWeek. Original link(Originally posted by Eduard Kovacs)

Authorities in Australia and the US have arrested and charged two individuals for developing and selling the Hive RAT. The post Two People Arrested in Australia and US for Development and Sale of Hive RAT appeared first on SecurityWeek. Original link(Originally posted by Ionut Arghire)

Former security engineer Shakeeb Ahmed was sentenced to prison for hacking and defrauding cryptocurrency exchanges. The post Former Security Engineer Sentenced to Prison for Hacking Crypto Exchanges appeared first on SecurityWeek. Original link(Originally posted by Ionut Arghire)

ThepreviousKasperskyresearchfocusedonadetailedanalysisoftheLockBit3.0builderleakedin2022.Sincethen,attackershavebeenabletogeneratecustomizedversionsofthethreataccordingtotheirneeds.Thisopensupnumerouspossibilitiesformaliciousactorstomaketheirattacksmoreeffective,sinceitispossibletoconfigurenetworkspreadoptionsanddefense-killingfunctionality.Itbecom...

Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus.  The post Palo Alto Networks Releases Fixes for Firewall Zero-Day as Attribution Attempts Emerge appeared first on SecurityWeek. Original link(Originally posted by Eduard Kovacs)