Security Bulletin

The China-affiliated group is using the highly modular DeepData framework to target organizations in South Asia.

Among the top exploited zero-day vulnerabilities were bugs found in systems from Citrix and Cisco.

The consolidation folds Cybereason's endpoint detection and response (EDR) platform into Trustwave's managed security services offerings, such as managed detection and response (MDR).

The shift to cloud means securing your organization's digital assets requires a proactive, multi-layered approach

The group seeks out aerospace professionals by impersonating job recruiters — a demographic it has targeted in the past as well — then deploys the SlugResin backdoor malware.

The tech giant fixed privilege-escalation and model-exfiltration vulnerabilities in Vertex AI that could have allowed attackers to steal or poison custom-built AI models.

Researchers say the Iranian threat actors impersonated the North Koreans to hide their activities.

Increasingly sophisticated AI tools enable attackers to automate malware generation, craft realistic phishing messages, and execute large-scale distributed denial-of-service attacks.

Based on surveys of security experts, members, and customers as well as insights from platform data, the greatest concerns were shown to be over leaked AI training data at 35%, followed by unauthorized use at 33% and the vulnerability of AI models to...