CyberNews Cybersecurity firm Trezor has disclosed a data breach that affects nearly 14,000 of its customers. The incident occurred when ShipMonk, Trezor’s shipping and logistics provider, was hacked by attackers who exploited a vulnerability in the third-party analytics platform Metabase. As a result, customers’ order data, including their full names, shipping addresses, email addresses, and phone … Read more
A new era in US cybersecurity has begun with a presidential memorandum that allows vetted private companies to conduct cyber operations under federal control against foreign cybercrime gangs. The initiative, managed by the National Coordination Center (NCC), marks a significant shift towards a more collaborative approach between the government and the private sector. The program … Read more
Fortinet, a leading cybersecurity company, has issued patches for eight vulnerabilities across its products, including two high-severity authentication flaws in FortiWeb and FortiManager. The patches address weaknesses that could allow attackers to bypass security controls or gain unauthorized access to sensitive systems. The most critical issue affects FortiWeb, where an attacker can exploit a flaw … Read more
Team8, a prominent Israeli venture capital firm, has secured an additional $365 million in funding, bringing its assets under management to nearly $2 billion since its inception in 2014. This new influx of capital will be used to support promising startups across various sectors, with a particular focus on AI and cybersecurity. The company’s venture-creation … Read more
A Notorious APT Group Juggles State Espionage and Cryptocurrency Theft from the Same Web Panel Researchers have uncovered a sophisticated mercenary group operating out of China that seamlessly switches between conducting high-stakes cyber espionage on behalf of nation-states and engaging in lucrative cryptocurrency theft. Dubbed “Jewelbug” by Symantec, this advanced persistent threat (APT) group has … Read more
WhatsApp’s Latest Defense Against Scammers: A New “Scam Alert” Feature In a bid to protect its massive user base from scammers, WhatsApp has started rolling out a new optional feature that uses machine learning to flag potential scam messages. The “Scam Alert” feature is now available in a limited beta rollout as part of the … Read more
The White House has announced a major expansion of federal capabilities against foreign cybercrime gangs through a new program that allows vetted private US companies to conduct targeted cyber operations under federal control. The initiative, managed by the National Coordination Center (NCC), aims to disrupt and dismantle foreign cyber-enabled transnational criminal organizations (TCOs) that pose … Read more
Fortinet Patches Critical Authentication Flaws in FortiWeb and FortiManager, Urges Users to Update Immediately In a significant move to shore up its defenses, network security giant Fortinet has released patches for eight vulnerabilities across its products, including two high-severity authentication bugs that could allow attackers to gain unauthorized access to sensitive systems. The company’s FortiWeb … Read more
Cybersecurity Venture Firm Team8 Secures $365 Million in Additional Funding, Sets Sights on Next-Gen AI-Native Companies Israel-based venture fund Team8 has secured a massive injection of capital, with an additional $365 million pouring into its coffers. This latest funding round brings the company’s assets under management to nearly $2 billion since its inception in 2014. … Read more
Chinese Hackers-for-Hire Balance State Espionage with Cryptocurrency Heists A sophisticated group of hackers operating out of China has been caught using a single platform to carry out both state-sponsored cyber espionage and financially motivated cryptocurrency theft. Dubbed “Jewelbug” by researchers, this mercenary group is unlike any other, combining the tactics and techniques (TTPs) of a … Read more