Risk Assessments/Management

More than 100 high-value Mailchimp customers in the cryptocurrency and finance industries had their data exfiltrated as a result of a breach on one of the email marketing firm's internal tools.

More state cybersecurity leaders have been working to ensure their organizations' cloud IT vendors have products that meet certification program standards.

Antimatter announced its exit from stealth mode with $12 million raised in a Series A funding round, allowing the company to begin private beta for its service, which allows software-as-a-service firms to guarantee their customers' data security.

Amazon Web Services and Palo Alto Networks have partnered for the roll-out of the Palo Alto Networks Cloud NGFW for AWS, marking the first-ever native integration of Palo Alto's next-generation firewall into the public cloud.

While patches have been released in the four months since the emergence of the widespread Log4j vulnerability, many companies have been exposed and could have been compromised, SecurityWeek reports.

BleepingComputer reports that several new exploits have been added to the Mirai-based distributed denial-of-service botnet Beastmode, or B3astmode, three of which target different Totolink router models.

The Cybersecurity and Infrastructure Security Agency has issued an advisory regarding two critical security vulnerabilities impacting Rockwell Automation's programmable logic controllers and engineering workstation software, which could be abused for malicious code injection and stealthy automation process alterations, reports The Hacker News.

Threat actors have recently launched a phishing campaign exploiting the calendar app Calendly in an effort to exfiltrate sensitive account credentials, according to TechRepublic.