Security Bulletin

Software-as-a-service company Command Zero launches with a platform for investigating cybersecurity incidents that aims to minimize the grunt work.

Microsoft has issued updates for 139 security vulnerabilities in the latest edition of patch Tuesday.

A four-part framework for assessing OSS trustworthiness can be automated using free software.

In all, the company released fixes for a whopping 139 CVEs in its own products and four for non-Microsoft products.

NATO countries are finding themselves at increased risk for cyberattacks from nations opposed to the international alliance.

Though the company reassures its users that customer funds were not accessed, the same cannot be said for customer information.

A joint advisory from top U.S. allies details how APT40 targets vulnerable end-of-life devices within hours or days of a PoC’s release.

Cybersecurity investments reached $3.3 billion during the second quarter of this year, which was 71% higher than the same period last year despite the number of transactions only increasing by one, SiliconAngle reports.

The state-sponsored threat group is capable of exploiting fresh software vulnerabilities within hours of their initial discovery.

The ransomware-as-a-service platform just rolled off the assembly line, also targets Windows, and uses Golang for cross-platform capabilities.