Security Bulletin

National Cyber Director Harry Coker noted that the U.S. has intensified defending its critical infrastructure amid mounting cyber threats posed by Chinese state-sponsored threat operations, including Volt Typhoon, CyberScoop reports.

Burnout has been an oft-reported problem among security professionals for years. Are there any new ideas for supporting mental health in the industry?

Most everyone uses email and critical infrastructure sectors are high-profit industries that deploy legacy technology easy to exploit, so attackers take advantage of the easy access via email to make hefty profits.

One of China's biggest espionage operations owes its success to longstanding Microsoft Exchange bugs, open source tools, and old malware.

A CISO job description is a moving target in 2024 as these security leaders face new twists on employment challenges, a 'hostile' regulatory climate and a bevy of new internal and external digital threats.

For incident responders, a variety of techniques for information retrieval from locked-up VMs.

Upgrade, an ARPA-H program, will focus on automating cybersecurity for healthcare institutions so that providers can focus on patient care.

The max-severity bug affects versions using the SAML single sign-on mechanism.

The bug enables unauthenticated attackers to log into the Veeam Backup Enterprise Manager.

The move by Rockwell Automation was in response to heightened global tensions and concerns about potential attacks on critical infrastructure.

Startups at Innovation Sandbox 2024 brought clarity to artificial intelligence, protecting data from AI, and accomplishing novel security solutions with new models.