Security Bulletin

Defenders lose the home-field advantage when they're protecting cloud assets and SaaS platforms, two researchers said at the BSides Las Vegas 2024 security conference.

While still under development, the malware contains Turkish-language filenames, can record the screen and keystrokes, and inject custom overlays to steal passwords and sensitive data.

Protections like Windows Smart App Control are useful but susceptible to attacks that allow threat actors initial access to an environment without triggering any alerts.

Zero-code mobile app security tools offers professional-grade cyber defenses without requiring developers to write complex, customized security code.

Everyone expected some kind of cyberattack during the Olympics. If this is the best they've got, the bad guys don't deserve a spot on the podium.

Companies are by and large afraid of the threat posed by unknown threat actors and exploits.

CVE-2024-36971 could enable remote code execution due to a use-after-free error.

Security pros say the Hunters International ransomware group has been targeting IT workers, although not in any specific vertical sector.

At least two Russian nationals serving prison sentences for cybercrime offenses, Vladislav Klyushin and Roman Seleznev, were released as part of the landmark prisoner swap.

The RaaS group that distributes Hive ransomware delivers new malware impersonating as validly signed network-administration software to gain initial access and persistence on targeted networks

Cybersecurity startup RAD Security, a finalist in this year's Black Hat USA Startup Spotlight competition, looks for "drift events," or events that vary from the baseline.