Security Bulletin

Notorious online forum 4chan has been taken down following a significant cyberattack claimed by members of the Soyjak.party imageboard, or The Party, on Monday, according to BleepingComputer.

About 44% of advanced bot traffic targets APIs, according to the Imperva 2025 Bad Bot Report.

DHS contract to operate the Common Vulnerabilities and Exposures (CVE) Program will expire on April 16.

Cybercriminals capitalize on tax preparation stress, technology sprawl, and lax communications. Accounting teams can't afford to treat cybersecurity as an afterthought.

The remediated flaw gave adversaries a way to maintain access to the app through password resets.

Bad bots are becoming increasingly difficult to detect as they more easily mimic human behaviors and utilize evasion techniques, researchers say.

Researchers at Abnormal Security said threat actors are using a legitimate presentation and graphic design tool named "Gamma" in phishing attacks.

Experts say companies need to step up cybersecurity during ongoing U.S.-China tensions.

Customer data such as birth dates, credit card numbers and driver's license information were stolen when threat actors exploited zero-day vulnerabilities in Cleo-managed file transfer products.

Russia-backed APT29's latest campaign once again uses malicious invites to wine-tasting events as its lure, but this time targets a different set of vintages — errr, victims — and delivers a novel backdoor, GrapeLoader.