Security Bulletin

New policy detailing appropriate ransomware response efforts among governments is reportedly being finalized by the Biden administration in a bid to advance collective action in curbing ransomware payments, Reuters reports.

Cybercriminals are upping their phishing with shortened links and showing that coveted, regulated top-level domains aren't as exclusive as you'd think.

The APT group uses updates from the app to get the user to download the malware.

Gutsy’s cofounder discusses the use of the data science of process mining into cybersecurity.

Report highlights the challenges impeding the applications industry from achieving AppSec maturity.

Digital transformation is changing the face of industrial operations and presents opportunities for organizations to revolutionize their businesses. Despite the benefits for OT, digital connectivity also brings great risk to operations.

The SEC alleges SolarWinds and CISO Tim Brown defrauded investors by not disclosing security risks ahead of the 2020 Orion Sunburst attacks.

Cyber adversaries are scanning public GitHub repositories in real-time, evading Amazon quarantine controls, and harvesting AWS keys.

Microsoft's longstanding practice isn't enough to handle its vulnerability problem.

Despite the growing demand for AI transparency, 10 of the better-known models did not score very highly on Stanford's new Foundation Model Transparency Index.

Here’s why we need to rethink firewalls for cloud-native applications.