Duncan Riley
Latest from Duncan Riley
Three separate Chinese state-sponsored advanced persistent threat groups have been observed targeting victims, including U.S. state governments, European diplomatic entities and Gmail accounts linked to the U.S. government. The first group, APT41, also known as Wicked Panda and Winti, is believed by researchers …
APC Smart-UPS vulnerabilities expose millions of businesses to hacking
Researchers at cybersecurity firm Armis Inc. today said they have uncovered three critical vulnerabilities in APC Smart-UPS that could allow attackers to manipulate the power of millions of enterprises. APS, a division of Schneider Electric, is one of the leading vendors of …
‘Dirty Pipe’ Linux vulnerability allows an attacker to overwrite data
A newly revealed vulnerability in the Linux kernel allows an attacker to overwrite data in arbitrary read-only files. Detailed today by security researcher Max Kellermann and dubbed “Dirty Pipe,” the vulnerability leads to privilege escalation, since unprivileged processes can inject code into root …
Source code stolen in Samsung data breach
Samsung Electronics Co. Ltd. today confirmed that it has suffered a data breach in which confidential information was stolen, including the source code for its Galaxy smartphones. The theft occurred late last week. The Lapsus$ ransomware gang took the credit. Lapsus$ is …
Cloudflare, CrowdStrike and Ping Identity to provide free cybersecurity to vulnerable industries
Cloudflare Inc., CrowdStrike Holdings Inc. and Ping Identity Corp. today are teaming up to form the Critical Infrastructure Defense Project, a project that will provide free cybersecurity services to vulnerable industries. The project is designed to enhance defenses against critical areas of enterprise risk. …
Autonomous vehicle startup Pony.ai raises new funding on $8.5B valuation
Self-driving car technology startup Pony.ai late Sunday said it has raised new funding on a valuation of $8.5 billion, a significant increase in valuation from its last round in February 2021. The amount raised in the Series D round and who participated …
Patient records exposed in data breach at Michigan Medicine
The data of thousands of patients is believed to have been exposed following a data breach at Michigan Medicine. The data breach started with an employee email account compromised on Dec. 23. The attacker used the account to obtain information and send phishing …
Intel vPro platform for 12th Gen Core offers enhanced performance and security
Intel Corp. today announced the latest Intel vPro platform powered by 12th Gen Intel Core, offering what it says are enhanced performance, security, manageability and stability. Built for businesses, the Intel vPro platform with 12 Gen Intel Core processors is said to …
Darktrace shares rise on growing demand for services
Shares in machine learning cybersecurity firm Darktrace PLC rose in regular trading after the company revised its outlook thanks to growing demand for its services. For the six months ended Dec. 31, Darktrace reported a net profit of $5.9 million, compared with …
Israeli AI-powered security engineering startup CardinalOps raises $17.5M
Israeli artificial intelligence-powered security engineering startup CardinalOps Ltd. revealed today that it has raised $17.5 million in new funding to fuel global expansion in go-to-market and product innovation activities. Viola Ventures led the Series A round with Battery Ventures, Glilot Capital, Symbol and top …