Security Bulletin

Lawmaker says bipartisan infrastructure investment is essential to modernize U.S. transportation.

Here are five steps defenders can take in the wake of the Canvas breach.

The jscrambler supply chain attack involved a malicious preinstall hook within version 8.14.0 of the npm package.

The ACSC reports that malicious actors are actively scanning websites for vulnerabilities in various CMS platforms and plugins, including WordPress, Craft CMS, MaxSite CMS, MetInfo CMS, and Joomla JCE.

The campaign reportedly centers around a website known as "GdeBenz," which has attracted over one million visitors.

The vulnerabilities, CVE-2026-48939 affecting iCagenda and CVE-2026-56291 affecting Balbooa Forms, both allow for unrestricted file uploads.

Matt Burch, a principal security researcher at Atredis Partners, will present his findings on CryptoPro Secure Disk at Black Hat USA 2026.

QiAnXin, a Chinese cybersecurity company, reported that while the group's operations may appear unsophisticated due to the use of SEO poisoning and counterfeit software installers, their organizational structure is more complex, involving multiple...

The APS-ONE-400, part of Keysight's APS-100/400-gigabit Ethernet (GE) hardware line, offers 400 Gb/s Layer 4-7 throughput and 95 Gb/s of elephant flow throughput, addressing the substantial data transfers common in AI applications.

The NHS is implementing a new awareness campaign and updated guidance for healthcare organizations to prevent, monitor, and report unauthorized access to patient records.

The incident involved a staff member transferring a spreadsheet containing patient data from the maternity system to their personal email.