The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Coast Guard Cyber Command (CGCYBER) have sounded the alarm over in-the-wild attacks targeting a recently disclosed vulnerability in Zoho’s ManageEngine ADSelfService Plus product. Tracked as CVE-2021-40539 and rated critical severity (CVSS score of 9.8), the vulnerability has been exploited ..
Tag : NEWS&INDUSTRY
A divided federal appeals court has upheld the dismissal of an ACLU lawsuit challenging a portion of the National Security Agency’s warrantless surveillance of Americans’ international email and phone communications. The 4th U.S. Circuit Court of Appeals ruled Wednesday that the lawsuit must be dismissed after the government invoked the “state secrets privilege,” meaning that ..
Nearly two dozen cybersecurity mergers and acquisitions were announced in the first half of September 2021. Achieve Partners acquires Metmox Private equity firm Achieve Partners acquired managed security service provider (MSSP) Metmox with the goal of addressing the global talent shortage. As a result of the acquisition, Achieve will create a large-scale cybersecurity apprenticeship program ..
Endpoint security platform Kolide on Thursday announced that it has raised $17 million in Series B funding, for a total of $27 million raised to date. The funding round was led by Boston-based venture capital OpenView Partners. Matrix Partners, who led Kolide’s Series A, also invested in the new round. Kolide sells a Security-as-a-Service (SaaS) ..
Microsoft on Wednesday informed owners of consumer accounts that they can now go completely passwordless and rely on other, more secure authentication methods. Users with existing Microsoft accounts can delete their password from the account, and new accounts can be created without a password. Users will be able to rely on Microsoft’s Authenticator app, Windows ..
Cloud backup company Rewind has announced raising $65 million in a Series B funding round, which brings the total amount invested in the firm to more than $80 million. The funding round was led by private equity and venture capital firm Insight Partners, with participation from Bessemer Venture Partners, FundFire, Inovia Capital, Ridge Ventures, ScaleUp ..
Four of the fixes that Microsoft released as part of its September 2021 Patch Tuesday updates deal with vulnerabilities in the Open Management Infrastructure (OMI) software agent embedded in Azure services. Assessed with severity ratings of critical and high, the vulnerabilities, collectively dubbed OMIGOD, could be exploited to execute code remotely or gain elevated privileges on ..
After remaking their security procedures following the 9/11 attacks to stop airline hijackings, carriers are now faced with rising threats targeting computers and electronic equipment critical to their operations and safety. Since the tragedy 20 years ago on Saturday, airlines and airports have fortified cockpits, barred sharp objects in carry-on luggage and improved technology to ..
A series of record-breaking RPS-based distributed denial of service (DDoS) attacks observed over the past month are the result of a new, powerful botnet flexing its muscles to prove its capabilities. Referred to as Mēris (the Latvian word for plague), the botnet is apparently responsible for the largest recorded application layer DDoS assault to date, ..
Google this week introduced a new suite of services designed to improve privacy in the Android operating system. The new features add to the previously introduced Private Compute Core in Android 12 beta, an open source, secure environment designed to be completely isolated from the Android platform itself, as well as from other applications. For ..
