Security Bulletin

Here's a look forward to the Ping YOUniverse conference to be held in Austin, Texas, Sept. 1-2.

Attackers moved quickly to exploit a critical SAP Commerce Cloud bug following its patch.

World-class threat modeler Adam Shostack shared he was "blown away" by OpenAI's revelations about the Hugging Face attack, and explains why his new threat model for LLMs is both "lightweight yet still usable."

The botnet adds exploitation modules, credential theft, and reverse SOCKS relays to turn compromised devices into persistent attacker infrastructure.

Security teams in heavily regulated industries can’t afford to make data privacy a “nice-to-have” option.

The most important aspect of Mythos isn't what it finds, but how it thinks. Here's how to use that thinking to protect your organization.

A fake GitHub download page hosts the malicious ClickFix command.

How proactive prioritization will save time and effort when your team faces a wave of AI-discovered vulnerabilities.

While the breach was initially believed to affect only recent orders, new information suggests older orders may also be compromised.

Starting with the 2028 Wiretap Report, which will be published in 2029, the judiciary will include data on network investigating techniques.

The initiative mandates the creation of an AI cybersecurity officer role within every state agency and establishes an AI cyber defense program housed in the state’s Cybersecurity Integration Center.