Security Bulletin

At least two people responsible for operating the malware network that infected an estimated 1,200 servers.

A professional-grade tool set, appropriately dubbed "CloudScout," is infiltrating cloud apps like Microsoft Outlook and Google Drive, targeting sensitive info for exfiltration.

In the latest attack against ISPs, second-largest French provider Free fell victim to unknown cyberattackers who attempted to sell the compromised data it stole from the company on an underground cybercrime forum.

New research finds that six years later, AMD and Intel processors can still be hit with speculative execution attacks.

A collaboration with the FBI and law-enforcement agencies in Europe, the UK, and Australia, Operation Magnus has seized servers and source code related to the two malware families, which have stolen data from millions of victims worldwide.

Great CISOs are in short supply, so choose wisely. Here are five ways to make sure you've made the right pick.

The company's proprietary Cloud Twin technology provides security operations teams with real-time cloud threat modeling, enabling swift detection of attack paths across cloud infrastructures.

Based on responses from over 400 industry professionals, the report highlights that telcos aim to optimize 5G network efficiency to support high-demand applications like Internet of Things and edge computing but struggle to fully utilize existing...

SkyScalpel aims to help security teams identify policies altered by threat actors to obscure permissions and evade detection.

The collaboration offers enterprises a scalable solution that integrates automated public key infrastructure and certificate management to secure continuous integration and continuous delivery pipelines without slowing developer workflows.

IBM Guardium AI Security focuses on detecting vulnerabilities in both official and unapproved AI installations, known as shadow AI, which allows employees to use unauthorized AI models, potentially exposing sensitive data.