Security Bulletin

In the latest Secure Future Initiative Progress Report, Microsoft described efforts to rebuild its security culture, including making security a core priority for employees during performance reviews and launching a new "Secure by Design UX Toolkit."...

Secureworks research shows two ransomware operators offering multiple business models with ransomware-as-a-service, mimicking the structures and processes of legitimate businesses.

Verizon's "2025 Data Breach Investigations Report" highlights dire — but not new — trends in the education sector, where faculty and staff continue to fall for social engineering campaigns and make simple security errors.

CISA cites 16 CVEs impacting industrial systems in ICS advisory, four critical.

M&S has launched an investigation and said some customer operations are impacted.

Use of synthetic identities by malicious employment candidates is yet another way state-sponsored actors are trying to game the hiring process and infiltrate Western organizations.

Attackers are using credentials stolen via phishing websites that purport to be legitimate securities company homepages, duping victims and selling their stocks before they realize they've been hacked.

Scalable, effective — and best of all, free — securing Kubernetes workload identity cuts cyber-risk without adding infrastructure, according to new research from SANS.

In a world where insider threats, nation-state adversaries, and technological evolution create new challenges, companies must prioritize transparency, ethical leadership, and a culture rooted in trust.

Ransomware prevention firm Halcyon has launched the Threat Research Incentive Program, offering up to $10,000 for verified intelligence on ransomware actors and tactics in what it calls the first bug bounty program focused exclusively on ransomware...

Security researchers have detailed the evolving tactics of the Russian-affiliated threat group Gamaredon, particularly its use of the PteroLNK variant within the Pterodo malware family, GBHackers reports.