Security Bulletin

Malicious emails spoofing Israel's National Cyber Directorate have been leveraged by Cotton Sandstorm to lure targeted entities into downloading a Google Chrome security update, which facilitates the delivery of WezRAT that enables file downloading...

Attackers delivered phishing emails with a ZIP file attachment with an executable Rust-based loader, which prompts Windows batch scripts that not only open lure documents but also facilitate the deactivation of antivirus software prior to the...

DeepData, which has a layout identical to LightSpy and features a dozen infostealing-focused plugins, enables not only the exfiltration of data from browsers, password managers, and social networking apps, but also the recording of audio from its...

Infiltration of AnnieMac's systems between Aug. 21 and 23 resulted in the potential copying of individuals' names and Social Security numbers, said the New Jersey-based mortgage lender in breach notification letters, which noted the lack of evidence...

The voluntary recommendations from the Department of Homeland Security cover how artificial intelligence should be used in the power grid, water system, air travel network, healthcare, and other pieces of critical infrastructure.

Email at many organizations has stopped working; the tech giant has advised users who are facing the issue to uninstall the updates so that it can address flaw.

According to Mozilla, users have a lot more power to manipulate ChatGPT than they might realize. OpenAI hopes those manipulations remain within a clearly delineated sandbox.

Even more alarming: the EPA does not have a notification system for cybersecurity incidents.

Bresman talks with SC Media about the role of artificial intelligence in identity and access management and also touches on the challenges of protecting data in hybrid environments.

CyberScoop reports that the incoming Trump administration has been urged by Deputy National Security Adviser for Cyber and Emerging Technologies Anne Neuberger to establish a framework for minimum cyber regulations for critical infrastructure...

BitDefender has issued a free decryption tool for the novel ShrinkLocker ransomware strain that emerged in May, according to The Record, a news site by cybersecurity firm Recorded Future.

Global B2B data aggregation firm DemandScience, formerly known as Pure Incubation, was confirmed by cybersecurity researcher Troy Hunt to have owned the 122 million business contact details stolen and exposed by threat actor KryptonZambie in February...