Security Bulletin

Vulnerability exploits, pure extortion and internal risks are on the rise, while AI threats fall short.

The quest to keep data private while still being able to search may soon be within reach, with different companies charting their own paths.

The breach was carried out with stolen Citrix credentials for an account that lacked multifactor authentication. Attackers went undetected for days, and Change's backup strategy failed.

SiliconAngle reports that more robust high-risk identity threat discovery and response efforts are being aimed by enterprise identity protection startup Semperis with its new machine learning-based Lightning Identity Runtime Protection identity...

The U.S. Department of Justice announced that former National Security Agency information systems security designer Jareh Sebastian Dalke was given a prison sentence of 262 months, or nearly 22 years, for trying to sell confidential documents with U...

Unmanaged and unknown Web services endpoints are just some of the challenges organizations must address to improve API security.

Ukraine's Main Directorate of Intelligence, or GUR, has taken responsibility for disrupting the online services of United Russia, the country's ruling party, on Apr. 26, coinciding with Russia's "Victory Dictation" initiative after the party...

Some customers found that they had the ability to cancel a stranger's flight to another country after opening the app, which was showing other individuals' flight details.

Andrew Witty stuck with the familiar corporate line of providing consumers with two years of credit monitoring.

The newly discovered malware, which has so far mainly targeted Turkish telcos and has links to HiatusRat, infects routers and performs DNS and HTTP hijacking attacks on connections to private IP addresses.