Security Bulletin

The nation-state espionage group known for attacking Pakistan has expanded its reach to targets in Egypt and Sri Lanka.

IBM’s Cost of a Data Breach 2024 report revealed AI-driven defenses significantly lower breach expenses.

Clutch Security is the latest cybersecurity startup looking to secure and manage non-human identity.

According to the study, around 400 stolen GenAI credentials are being sold by threat actors per day.

With sufficient privileges in Active Directory, attackers only have to create an "ESX Admins" group in the targeted domain and add a user to it.

It is a coordinated effort involving multiple threat clusters, each with toolsets and tactics to maintain long-term access.

Microsoft researchers said attackers sought to gain full administrative privileges on ESXi servers via Active Directory.

CyberScoop reports that increased support for creating, implementing, and expanding cybersecurity apprenticeship programs would be pushed by the new bipartisan Cyber Ready Workforce Act introduced by Sens. Jacky Rosen, D-Nev., and Marsha Blackburn, R...

The U.S. has joined ongoing efforts to ensure human rights protections under the United Nations cybercrime treaty draft, which is under final negotiations until Aug. 9, according to The Record, a news site by cybersecurity firm Recorded Future.

Major U.S. health savings account administrator HealthEquity had information from 4.3 million individuals exfiltrated following the infiltration of an online data storage location using a compromised third-party vendor's user accounts earlier this...

Organizations across Ukraine were noted by the country's Computer Emergency Response Team to have been targeted by Belarus-linked advanced persistent threat operation GhostWriter, also known as UAC-0057, in attacks distributing the PicassoLoader...