Cyber Correspondent. Beat: Cyber & Security, Breaches, attacks and the people defending against them.
Cathedral reached the Claude maker's HR, sales and IT systems through third-party software, as part of a bug bounty program. According to Anthropic, user conversations, source code and model weights were not exposed.
The valuation of the cloud security company founded by Israeli entrepreneur Amiram Shachar more than doubled in nine months. The round comes days after the disputed report of a Datadog takeover offer.
Anthropic's security team revealed five attack chains built by an unreleased internal research model, including one-click remote code execution in Chrome. All the flaws were reported to vendors in advance and, according to reports, fixed.
A data leak affecting about 38,000 Daishin customers, a breach of an internal system at crypto exchange Bithumb, and a regulator sending in inspectors. The top supervisor warns that with AI, attacks on several institutions at once could become the norm.
The Tel Aviv company, founded by Unit 8200 veterans, develops AI agents that investigate security alerts and filter out false positives. A $28 million Series A was led by Red Dot.
According to The Information, Datadog offered nearly $4 billion for the cloud security company founded by Israeli entrepreneurs, which preferred to raise capital instead. Calcalist reports the offer was never made.
CISA added the two critical PHP vulnerabilities to its list of actively exploited flaws and ordered federal agencies to patch by October 29. Those who cannot update are told to take their servers offline.
According to six sources, Israel's Discover-Tech was one of the world's largest bidders for ads shown to users of SpaceX's satellite internet. Security researchers believe the ads were used to locate and track users. The company did not respond.
According to a Check Point report, attacks on Israeli government bodies jumped 82% during the election period. The National Cyber Directorate and the Central Elections Committee launched an operation to protect the vote. Here is how to spot a fake message.
An Israeli security researcher bought a domain the telecom company had let go, and began receiving customers' picture messages. According to TheMarker, his reports to the company and to the National Cyber Directorate went unanswered, and the gap was closed only after the newspaper got in touch.
Many organizations do not know which PHP versions their servers run. A non-intrusive check that compares the version a server reports with the patched versions can give an initial picture. Moshe Levi of Levinity Cyber explains what it reveals, and what it does not.
Two severe PHP vulnerabilities allow remote code execution without authentication. Patches are out, exploitation attempts are already here, and there is no safe workaround.
