Security Bulletin

Data poisoning represents the next big existential cybersecurity threat — unless organizations can ensure their AI systems are safe and trustworthy.

One cyber expert worries that a weakened CISA facing budget cuts will lead to a serious attack on our critical infrastructure.

More than 940 GB of data was exfiltrated from Genea on Valentine's Day.

Cleveland Municipal Court's system takedown has been implemented "as a precautionary measure."

Bybit is offering up to $140 million to help recover the $1.5 billion in Ethereum stolen.

Companies critical to the aviation and aerospace supply chains didn't patch a known CVE, providing opportunity for foreign espionage.

More than 350 websites have been compromised as part of the sweeping 360XSS spam ads attack.

Such a weakness could be exploited to expose GitHub archives with sensitive corporate information.

By modernizing hiring, agencies can not only attract top talent but also bring much-needed stability and efficiency to the workforce.

More than 100 commands allowing multi-platform data compromise have been integrated into LightSpy.

Nearly 40 domains have been created to facilitate intrusions distributing the Vidar malware.

A host of automated approaches identifies and remediates potential vulns while still retaining a role for security analysts to filter for context and business criticality.