Security Bulletin

Operations at Japan Airlines, the country's flag carrier, have resumed after the successful restoration of systems as a result of a distributed denial-of-service attack on Thursday, which led to the interruption of some flights, same-day departure...

Major U.S. aerospace and defense firm General Dynamics has confirmed having dozens of employee benefits accounts breached following a phishing attack in October, SecurityWeek reports.

Sometimes it feels like burnout is an inevitable part of working in cybersecurity. But a little bit of knowledge can help you and your staff stay healthy.

The US water sector suffered a stream of cyberattacks over the past year and half, from a mix of cybercriminals, hacktivists, and nation-state hacking teams. Here's how the industry and ICS/OT security experts are working to better secure vulnerable...

The work on quantum computing hit some major milestones in 2024, making the path to a workable quantum computer seem closer than ever. Google, Microsoft, and other research efforts hit significant milestones this year, but is the cybersecurity world...

Organizations faced a number of changes to reach and maintain government compliance in 2024.

Security teams should immediately patch 9.9 vulnerability in web content distribution platform.

Intergovernmental space exploration body European Space Agency had its online shop compromised with a malicious script triggering a bogus Stripe payment page that sought to exfiltrate payment card details and other sensitive customer details, reports...

Texas-based McMurry University had data from almost 18,000 individuals compromised as a result of a June data breach, Cybernews reports.

Tennessee-based substance abuse treatment service provider American Addiction Centers had information from 422,424 individuals exfiltrated during a breach of its internal servers in September, which was initially disclosed to have affected 410,747...

Transit services at the Pittsburgh Regional Transit have resumed following a brief interruption last Thursday amid a ransomware intrusion, reports The Record, a news site by cybersecurity firm Recorded Future.

Hackread reports that more than 30,000 internet-exposed instances of widely used cloud-based API development and testing platform Postman Workspace had API keys, tokens, and admin credentials exposed as a result of access control misconfiguration...