UPDATED
GeekWire ·
Alessio Sanfilippo, CEO of Redin. (Redfin Photo) Redfin , the Seattle-based real estate brokerage acquired last year by Rocket Companies, has named Alessio Sanfilippo as CEO. Sanfilippo was previously Meta’s vice president of insights...
Cybersecurity Dive - Latest News ·
An actor known as Fire Ant has expanded its reach into trusted environments, with unique tooling and stealth.
GeekWire ·
Ben Steele, chief commercial officer for Also, poses with the company’s TM-B e-bike on the deck of Also’s new offices in Seattle. (GeekWire Photo / Kurt Schlosser) Also , a fast-growing electric micromobility startup born out of Rivian...
GeekWire ·
The TM-B e-bike from Also, atop the hill at Gas Works Park in Seattle and just down the road from the startup’s new offices. (GeekWire Photo / Kurt Schlosser) I pulled a classic Seattle move while test riding an e-bike from Rivian...
CISA KEV · · Critical severity
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability. PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system...
CISA KEV · · Critical severity
PaperCut NG/MF Unsafe Reflection Vulnerability. PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the...
BetaKit · · Medium severity
“Somebody should do something about all the problems.” That’s a classic headline from The Onion , satirizing the sentiment of expressing concern while expecting an abstract somebody to sweep in and somehow fix it. That headline was top...
BetaKit ·
Back in 2015, Firat Eren put his money into a neat little online bartering platform that grew out of a Facebook group called Bunz . In 2020, following a controversial pivot to a cryptocurrency model that led to a ‘ Bunxit ’ of users and...
CISA KEV · · Critical severity
Gitea Code Injection Vulnerability. Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell...
CISA KEV · · Critical severity
Microsoft SQL Server Remote Code Execution Vulnerability. Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account....
CISA KEV · · Critical severity
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability. Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds...
CISA KEV · · Critical severity
Linux Kernel Out-of-Bounds Write Vulnerability. Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system. Required action:...
CISA KEV · · Critical severity
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability. Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges...
CISA KEV · · Critical severity
Red Hat Libuser Race Condition Vulnerability. Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation. Required...
CISA KEV · · Critical severity
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability. Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The...
CISA KEV · · Critical severity
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability. JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user...
CISA KEV · · Critical severity
Linux Kernel Unspecified Vulnerability. Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impact multiple products, including but not limited...
CISA KEV · · Critical severity
ownCloud Improper Authentication Vulnerability. ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without authentication if the username of a victim is known, and...
Cybersecurity Dive - Latest News ·
Five lawmakers serving on the Homeland Security Committee said Congress didn’t know enough about the Trump administration’s changes to the cybersecurity agency.
Cybersecurity Dive - Latest News · · Medium severity
The disruption took place amid a wave of attacks targeting vulnerable industrial devices in the water and energy sectors.
Cybersecurity Dive - Latest News · · Medium severity
The collaboration software’s developer took almost a full month to patch the flaw after disclosing it.
Cybersecurity Dive - Latest News · · Medium severity
An authentication bypass flaw is already under exploitation, the latest in a series of recent SharePoint attacks.
Cybersecurity Dive - Latest News · · Medium severity
The medical device-maker says it cannot yet determine any financial impact from the attack it suffered this week.
Cybersecurity Dive - Latest News · · Critical severity
Compromised IoT devices were used in a yearslong campaign against key sectors and federal agencies.
Cybersecurity Dive - Latest News · · Medium severity
OpenAI released a technical breakdown of the historic incident and plans changes to prevent such an occurrence from happening again.
Cybersecurity Dive - Latest News · · Medium severity
The agency said its recent simulated cyberattacks offered several key lessons for many organizations.
Cybersecurity Dive - Latest News · · Medium severity
Researchers at Palo Alto Networks’ Unit 42 warn that threat actors are already using AI to accelerate cyberattacks beyond the abilities of modern defenses.
News – MeriTalk ·
Defense contractors largely continued their cybersecurity compliance efforts after the Pentagon suspended third-party assessments under its Cybersecurity Maturity Model Certification (CMMC) program, but many remain unprepared for those...
News – MeriTalk ·
The Department of Veterans Affairs (VA) deployed the Federal Electronic Health Record (EHR) system at three VA hospitals in Indiana on Aug. 22 as the agency continues deployments under its Electronic Health Record Modernization (EHRM)...
News – MeriTalk ·
Nicole Perry has assumed leadership of the Department of the Navy’s Office of Small Business Programs (OSBP), where she will oversee small-business acquisition initiatives across the Navy and Marine Corps, the department announced on...
News – MeriTalk ·
Federal agencies have hired more than 20,000 employees into positions matching jobs vacated through the Trump administration’s Deferred Resignation Program (DRP), according to a new analysis from the nonprofit, nonpartisan Partnership...
News – MeriTalk ·
Acting Navy Secretary Hung Cao appointed Andrew Magliochetti as deputy assistant secretary of the Navy for the defense industrial base, the Department of the Navy announced Aug. Magliochetti will serve as the principal civilian adviser...
News – MeriTalk ·
Federal technology officials said on Aug. 25 that increasingly capable artificial intelligence (AI) models are giving agencies new opportunities to strengthen cyber defenses and advance mission work as the technology reshapes the...
News – MeriTalk ·
20 issued a new national space transportation policy that calls for U.S. space transportation ranges to support more than 1,000 launches and reentries annually by 2030. The policy directs directing federal agencies to expand launch...
News – MeriTalk ·
The Treasury Department announced on Aug. 24 that it launched a public-private task force to help coordinate the financial sector’s shift to quantum-resistant cybersecurity. 24 press release that the Quantum-Readiness Task Force will...
News – MeriTalk ·
The General Services Administration (GSA) said Tuesday that it identified more than $13 billion in suspected fraud by federal contractors since March, calling it the largest suspected fraud bust in the agency’s history. 25 press release...
News – MeriTalk ·
The Department of the Army has selected five nuclear energy vendors and five initial military installations for the development of nuclear microreactors, officials told reporters on Aug. The selected vendors and installations are:...
News – MeriTalk ·
Federal agencies looking to scale artificial intelligence need to focus on more than technology. Mission alignment, governance, organizational structure, and workflow design will determine whether AI investments translate into lasting...
News – MeriTalk ·
Treasury Department Chief Information Officer (CIO) Sam Corcos has taken on additional tech leadership roles at the General Services Administration (GSA), the agency confirmed to MeriTalk. Corcos now serves as acting director of...
News – MeriTalk · · Critical severity
The Justice Department (DOJ) and Federal Bureau of Investigation (FBI) said on Aug. 26 that they seized domains used by two China-linked hacking platforms that targeted multiple federal agencies, the U.S. Senate, and critical...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free