Security Bulletin

Upgrade, an ARPA-H program, will focus on automating cybersecurity for healthcare institutions so that providers can focus on patient care.

The max-severity bug affects versions using the SAML single sign-on mechanism.

The bug enables unauthenticated attackers to log into the Veeam Backup Enterprise Manager.

The move by Rockwell Automation was in response to heightened global tensions and concerns about potential attacks on critical infrastructure.

Startups at Innovation Sandbox 2024 brought clarity to artificial intelligence, protecting data from AI, and accomplishing novel security solutions with new models.

Coming on the heels of Cisco buying Splunk, Palo Alto Networks acquiring IBM's QRadar, and LogRhythm merging with Exabeam, Snowflake's investment highlights the ongoing market pressure to improve SOC tools.

The U.S. Department of Justice announced that Chinese nationals Daren Li and Yicheng Zhang have been apprehended and indicted for leading a pig butchering scheme that allegedly resulted in the laundering of at least $73 million, The Hacker News...

House Armed Services Committee members Morgan Luttrell, R-Texas, and Chrissy Houlahan, D-Pa., will be advancing a proposed amendment to the upcoming fiscal year's defense authorization legislation that would establish a dedicated Cyber Force under...

Nearly two years after refusing to cooperate in a European Parliament probe regarding its extensive abuse of NSO Group's Pegasus spyware, Poland has made significant strides in ensuring accountability in spyware exploitation, with the country joining...

DefenseScoop reports that the Army Cyber Command has looked to bolster its defenses against cybersecurity threats against the U.S. critical infrastructure, especially those from Chinese cyberespionage group Volt Typhoon, which was previously reported...

Hackread reports that BreachForums was noted by one of its administrators ShinyHunters to reemerge under a new Onion domain in the dark web within the week following the FBI's recent disruption of the widely known cybercrime site.

The previously unknown malware (aka Hidden Shovel) is a ghost in the machine: It silently attacks kernel drivers to shut down security defense systems and thus evade detection.