Security Bulletin

Technology companies that cannot quickly fix dangerous vulnerabilities should not be allowed to sell their products to federal agencies, according to Pete Waterman, director of the General Services Administration’s Federal Risk and Authorization...

As outlined in The Register, a recent security assessment highlighted significant vulnerabilities within the healthcare sector, particularly concerning compromised gatekeepers and inadequate network security.

As outlined in The Register, Google has introduced a new account recovery method that utilizes selfie videos, allowing users to regain access to their accounts by providing a video of their face.

The Hacker News disclosed that a significant and often overlooked security threat involves fabricated machine identities, a concept analogous to synthetic identity fraud in the human realm.

Millions of vehicles equipped with dealer-installed KARR and SWDS security systems are susceptible to Bluetooth-based attacks that could allow unauthorized access or prevent vehicles from starting.

A state-sponsored threat group, dubbed "Laundry Bear," sends "half-click" phishing emails that require a victim only to open or preview the message.

AI is overwhelming patch teams, forcing a shift to smarter, automated remediation.

Upbound Group, a fintech company, disclosed that a data breach allowed threat actors to steal customer information and documents, which were then used to commit fraud and generate approximately $13 million in fraudulent Acima leases.

Hackers gained access to South Korea's National Diplomatic Academy's online education system for 10 months, stealing personal information of current and former Ministry of Foreign Affairs employees, including overseas diplomats, according to a recent...

A council worker has received a suspended sentence for unlawfully accessing sensitive personal records of family members and acquaintances.

As outlined in The Register, new data from Proofpoint revealed that a significant portion of organizations in the UK continue to pay ransom demands, despite evidence that doing so does not guarantee an end to extortion or the recovery of data.

LevelBlue: CIOs see AI as critical to cyber resilience amid rising threats.