SecurityWeek

An analysis by Chainalysis shows that ransomware payments dropped to $813 million in 2024, from $1.25 billion in 2023. 

The post Ransomware Payments Dropped to $813 Million in 2024 appeared first on SecurityWeek.

Trimble Cityworks is affected by a zero-day vulnerability that has been exploited in attacks involving the delivery of malware.

The post Trimble Cityworks Customers Warned of Zero-Day Exploitation appeared first on SecurityWeek.

A bipartisan duo in the the U.S. House is proposing legislation to ban the Chinese artificial intelligence app DeepSeek from federal devices.

The post House Lawmakers Push to Ban AI App DeepSeek From US Government Devices appeared first on SecurityWeek.

Zimperium warns that threat actors have stolen the information of tens of thousands of Android users in India using over 1,000 malicious applications.

The post 1,000 Apps Used in Malicious Campaign Targeting Android Users in India appeared first on SecurityWeek.

Astra Security and Invary have received new funding to fuel development of their vulnerability scanning and runtime security solutions.

The post Astra, Invary Raise Millions for AI-Powered Pentesting, Runtime Security appeared first on SecurityWeek.

Spanish authorities have arrested an individual who allegedly hacked several high-profile organizations, including NATO and the US army.

The post Hacker Who Targeted NATO, US Army Arrested in Spain appeared first on SecurityWeek.

Five Eyes cybersecurity agencies have released guidance on securing edge devices against increasing threats.

The post Five Eyes Agencies Release Guidance on Securing Edge Devices appeared first on SecurityWeek.

The blame of security incidents may be shared—but the burden of response always falls on the security team. Here’s how to prepare for the inevitable.

The post Security Teams Pay the Price: The Unfair Reality of Cyber Incidents appeared first on SecurityWeek.

Critical vulnerabilities in Cisco Identity Services Engine could lead to elevation of privileges and  system configuration modifications.

The post Cisco Patches Critical Vulnerabilities in Enterprise Management Product appeared first on SecurityWeek.

Researchers see dozens of fake DeepSeek websites used for credential phishing, cryptocurrency theft, and scams.

The post Fake DeepSeek Sites Used for Credential Phishing, Crypto Theft, Scams appeared first on SecurityWeek.

7AI has launched an agentic security platform, which uses AI agents to handle repetitive tasks.

The post 7AI Launches With $36 Million in Seed Funding for Agentic Security Platform appeared first on SecurityWeek.

San Francisco application security startup raises $100 million in a Series D funding round led by Menlo Ventures. 

The post Semgrep Raises $100M for AI-Powered Code Security Platform appeared first on SecurityWeek.

DeepSeek has computer code that could send some user login information to China Mobile.

The post Researchers Link DeepSeek’s Blockbuster Chatbot to Chinese Telecom Banned From Doing Business in US appeared first on SecurityWeek.

With each passing year, social engineering attacks are becoming bigger and bolder thanks to rapid advancements in artificial intelligence.

The post How Agentic AI will be Weaponized for Social Engineering Attacks appeared first on SecurityWeek.

David Kennedy is a hacker. There is no doubt about that. He has qualities common among hackers, but also many differences.

The post Hacker Conversations: David Kennedy – an Atypical Typical Hacker appeared first on SecurityWeek.

Just as OT technology differs from IT technology, the threats, likely adversaries, and potential harm also differ.

The post Cyber Insights 2025: OT Security appeared first on SecurityWeek.

A significant number of cybersecurity-related merger and acquisition (M&A) deals announced in January 2025. 

The post Cybersecurity M&A Roundup: 45 Deals Announced in January 2025 appeared first on SecurityWeek.

Riot has raised $30 million in Series B funding for a platform that helps employees improve their cybersecurity posture.

The post Riot Raises $30 Million for Employee Cybersecurity Solution appeared first on SecurityWeek.

150 abandoned Amazon S3 buckets could have been leveraged to deliver malware or backdoors to governments and Fortune companies.

The post Abandoned Amazon S3 Buckets Enabled Attacks Against Governments, Big Firms appeared first on SecurityWeek.

Russian threat groups have been observed exploiting a zero-day vulnerability in 7-Zip against Ukrainian entities.

The post Russian Hackers Exploited 7-Zip Zero-Day Against Ukraine appeared first on SecurityWeek.