Security Bulletin

BleepingComputer reports that major U.S. food manufacturer WK Kellogg has disclosed having its data compromised in a December ransomware attack by the Clop ransomware operation that involved a pair of Cleo managed file transfer software zero-day...

Chinese threat operation Smishing Triad has been ramping up smishing campaigns involving the spoofing of U.S. and UK toll service providers during the first three months of the year, according to Infosecurity Magazine.

Tisztelt Ügyfelünk! A Nemzetbiztonsági Szakszolgálat Nemzeti Kibervédelmi Intézet (NBSZ NKI) riasztást ad ki az Ivanti Connect Secure, Ivanti Policy Secure és az Ivanti ZTA Gateways szoftvereket érintő kritikus kockázati besorolású sérülékenységek...

Secure by Design is an important step to reduce the number of vulnerabilities present originally, but is it progressing fast enough? According to security experts Chris Wysopal and Jason Healey, the landscape is improving.

A former pharmacist is accused of compromising company computers and cameras to spy colleagues.

Cortex Cloud integrates Prisma Cloud with CDR to provide a consolidated security posture management and real-time threat detection and remediation platform.

Xanthorox AI purports to offer five models specifically designed to aid malicious activity.

Researchers found the threat actor attempting to use the now-patched flaw to load and execute a malicious dynamic link library on infected systems.

The changes will go into effect over the next several days to reflect which CVEs are being prioritized in the National Vulnerability Database (NVD).

Security pros expressed concern that old CVEs deferred by NIST could be revived via novel AI exploit techniques.

The 20-year-old was arrested in January 2024 alongside four other group members who carried out related cybercriminal acts, earning them similar charges.