Security Bulletin

Summary The Microsoft Security Response Center (MSRC) was made aware of a vulnerability where Azure Command-Line Interface (CLI) could expose sensitive information, including credentials, through GitHub Actions logs. The researcher, from Palo Alto...

Here are five reasons why CISOs need the ability to prove cyber resilience.

Hunters International appears to have acquired Hive ransomware from its original operators and may be seeking to cash in on the malware's reputation.

Atlassian Confluence Data Center and Server instances infected with the Effluence backdoor through the exploitation of the critical vulnerability, tracked as CVE-2023-22515, remained compromised even after the application of issued patches, reports...

Northern California-based healthcare system Sutter Health has disclosed that 845,441 patients had their personal data exposed after its third-party communications firm Virgin Pulse was impacted by the widespread MOVEit file transfer system hack...

Details of a major cyberattack against Australia's shipping industry remain few and far between, but the economic impact is clear.

SecurityWeek reports that new guidance on open source software management and software bills of materials consumption among software vendors and suppliers has been introduced by the Cybersecurity and Infrastructure Security Agency, the National...

Threat actors have been facilitating new spam attacks by exploiting the quiz results functionality of Google Forms, SiliconAngle reports.

All data stolen from Boeing amounting to nearly 50GB of files were claimed to have been leaked by the LockBit ransomware gang after the major U.S. multinational aircraft manufacturer purportedly denied to provide the demanded ransom, according to The...

BBC News reports that major port operator DP World Australia has returned online after operations at its Brisbane, Melbourne, Perth, and Sydney container terminals were disrupted by a cyberattack from Nov. 10 to 13.