Security Bulletin

Attackers with unauthorized VPN access were able to infiltrate Park'N Fly's network between July 11 and July 13, enabling the theft of individuals' names, mailing and email addresses, and Canadian Automobile Association and Aeroplan numbers.

Attacks commenced with the delivery of emails redirecting to sway[.]cloud[.]microsoft domain-hosted phishing pages that lured targets into scanning QR codes with their less secure mobile devices, which would facilitate further malicious activity.

Infiltration of Connexure's network resulted in the exfiltration of individuals' full names, birthdates, Social Security numbers, and insurance claim details, said the firm in newly issued data breach notifications.

Here’s a five-point checklist for building a strong vulnerability management team.

LLM automation tools and vector databases can be rife with sensitive data — and vulnerable to pilfering.

African nation's proactive approach to cybersecurity comes amid a rise in painful cyberattacks, including the breach of a major bank.

The exploit can be accessed on GitHub and makes it easier for the flaw to be exploited by threat actors.

The U.S. Marshals Service previously suffered a major ransomware attack in early 2023.

The attack is a mashup of QR codes and phishing that gets users to click on links to malicious webpages.

Security pros say the novel ASCII Smuggling technique underscores the evolving nature of AI-enabled attacks.