Security Bulletin

MeetingTV, a videoconferencing provider, has filed a lawsuit contesting a Koi Security blog post that accused its domain and Zoomcorder service of being fronts for a China-linked threat actor.

New research led by Muhammad Usama Sardar, a researcher at TU Dresden, indicates that the attested TLS protocol, designed to ensure clients are communicating with genuine, unmodified Trusted Execution Environments (TEEs), is susceptible to diversion...

The incident, detailed in a case study by Ransom-ISAC, involved Kairos gaining access to a U.S. government entity's network, reportedly through a brute-force credential attack.

The seven vulnerabilities in FatFs, a library embedded in firmware for devices like security cameras, drones, and industrial controllers, were found to be reachable through malformed USB drives, SD cards, or firmware update files.

An analysis found that over 8% of organizations had no email protection in place, and a mere 0.6% achieved full marks.

Two new models from Chinese firms compete with top US mainstream and frontier models. Should cyber-defenders be worried?

Improved institutional safeguards and stricter regulations have pushed the burdens of protection and risk reduction on to Australian businesses.

AI agents embedded in the SDLC need context, governance, and auditability to operate safely.

The incident, detected on April 15, saw unauthorized access to Medtronic's corporate systems between April 13 and April 19.

The vulnerability, discovered by EasyOptOuts co-founder Tyler Murphy, allows individuals with knowledge of the exploit to uncover the real email address masked by the anonymous alias.