Zscaler Acquires Airgap Networks to Enhance Zero Trust SASE

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zscaler has announced the acquisition of Airgap Networks, a company renowned for its agentless segmentation technology. This acquisition is set to redefine the way enterprises protect their internal traffic, particularly in IT and Operational Technology (OT) environments. Cybersecurity rapidly evolves, …

Critical Node.js Flaw Lets Attackers Execute Malicious Code on Windows Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Node.js project disclosed a high-severity vulnerability affecting multiple active release lines of its software on Windows platforms. This flaw, identified as CVE-2024-27980, allows attackers to execute arbitrary commands on affected systems, posing a serious risk to applications and services built …

Multiple Palo Alto Networks Firewall Flaws Let Attackers Cause Disruption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has recently disclosed four high-severity vulnerabilities in its firewall products. If exploited, these flaws could allow attackers to disrupt services by causing a denial of service (DoS) or manipulating user access controls. The vulnerabilities are tracked as …

AT&T Breach Update: 51 Million Customers’ Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AT&T has confirmed that a data breach has impacted the personal information of 51 million current and former customers. A significant data breach has been uncovered in recent times, following a series of investigations and reports. The scale of the …

Financial Sectors Lost $20 Billion Over the Past 20 Years

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a startling revelation, cyberattacks have surged to more than double their pre-pandemic levels, casting a long shadow over global financial stability. The International Monetary Fund (IMF) highlighted this alarming trend in its April 2024 Global Financial Stability Report, underscoring …

Multiple Adobe Security Vulnerabilities Let Attackers Execute Arbitrary Code Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A product security incident response team (PSIRT) manages a vulnerability disclosure program by acting as a single point of contact for external reporters, including customers, partners, penetration testers, and security researchers.  They provide a standardized process for reporting security vulnerabilities …

Cypago Announces New Automation Support for AI Security and Governance

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyber GRC software company Cypago has announced a new automation solution for artificial intelligence (AI) governance, risk management and compliance. This includes implementation of NIST AI RMF and ISO/IEC 42001, the newest AI security and governance frameworks. With more and …

Mysterious Index Bug Haunts a Tech Company’s Search Engine Project

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A mysterious bug has plagued a major tech company’s search engine project since February, randomly failing the index construction process. The issue is related to the code that merges partial indices during index building. “The search engine constructs the reverse …

New XploitSPY Android Malware Attacking Indian Users Mimic as Messaging Apps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ESET researchers have unveiled an espionage campaign called eXotic Visit. The campaign targets Android users by masquerading as benign messaging apps. This campaign, active since late 2021, cleverly disguises the open-source XploitSPY malware within seemingly functional messaging services. The primary …

Chrome Enterprise Premium With New AI Security Features

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has unveiled a significant upgrade to its enterprise browsing capabilities with the launch of Chrome Enterprise Premium. This new offering is designed to support endpoint security, providing a more robust defense mechanism for organizations navigating the complexities of modern …