Researchers at cybersecurity firm Armis Inc. today said they have uncovered three critical vulnerabilities in APC Smart-UPS that could allow attackers to manipulate the power of millions of enterprises. APS, a division of Schneider Electric, is one of the leading vendors of uninterruptible power supply devices, with more than 20 million units sold worldwide. The devices ...

A newly revealed vulnerability in the Linux kernel allows an attacker to overwrite data in arbitrary read-only files. Detailed today by security researcher Max Kellermann and dubbed “Dirty Pipe,” the vulnerability leads to privilege escalation, since unprivileged processes can inject code into root processes. The vulnerability, officially named CVE-2022-0847, affects Linux Kernel 5.8 and later versions, ...

Samsung Electronics Co. Ltd. today confirmed that it has suffered a data breach in which confidential information was stolen, including the source code for its Galaxy smartphones. The theft occurred late last week. The Lapsus$ ransomware gang took the credit. Lapsus$ is the same hacking group that was behind the theft of data from Nvidia ...

Cloudflare Inc., CrowdStrike Holdings Inc. and Ping Identity Corp. today are teaming up to form the Critical Infrastructure Defense Project, a project that will provide free cybersecurity services to vulnerable industries. The project is designed to enhance defenses against critical areas of enterprise risk. Under the project, eligible organizations will have access to the full suite of ...

Self-driving car technology startup Pony.ai late Sunday said it has raised new funding on a valuation of $8.5 billion, a significant increase in valuation from its last round in February 2021. The amount raised in the Series D round and who participated in the funding were not disclosed. The funding comes after Pony.ai scrapped plans ...

The data of thousands of patients is believed to have been exposed following a data breach at Michigan Medicine. The data breach started with an employee email account compromised on Dec. 23. The attacker used the account to obtain information and send phishing emails. However, the employee did not notice the account being taken over until ...

Intel Corp. today announced the latest Intel vPro platform powered by 12th Gen Intel Core, offering what it says are enhanced performance, security, manageability and stability. Built for businesses, the Intel vPro platform with 12 Gen Intel Core processors is said to provide leading productivity, high performance and the most comprehensive platform security for businesses. ...

Shares in machine learning cybersecurity firm Darktrace PLC rose in regular trading after the company revised its outlook thanks to growing demand for its services. For the six months ended Dec. 31, Darktrace reported a net profit of $5.9 million, compared with a loss of $48.4 million in the same six months in 2020. Revenue ...

Israeli artificial intelligence-powered security engineering startup CardinalOps Ltd. revealed today that it has raised $17.5 million in new funding to fuel global expansion in go-to-market and product innovation activities. Viola Ventures led the Series A round with Battery Ventures, Glilot Capital, Symbol and top angel investors from the security industry also participating. Including the new funding, CardinalOps has ...

Shares Okta Inc. dropped in late trading after the identity and access management company reported an outlook under analysts’ expectations in its latest earnings report. For the quarter ended Jan. 31, Okta reported a loss before costs such as stock compensation of $29 million, or 18 cents per share. That compares with an adjusted profit ...