Security Bulletin

One critical vulnerability, among many discovered by a researcher, could have allowed anyone to walk in and take over a national government portal.

AI governance gaps are putting CISOs under pressure as customers demand stronger compliance.

Does life feel Orwellian sometimes? One researcher has a solution for you: graphic tees that confuse the neural networks in surveillance cameras.

Nation-state attackers breach water systems through weak passwords, exposed PLCs, and poor segmentation — not sophisticated malware.

A recent ISACA poll reveals that while 90% of organizations believe employees are using AI, only 22% have seen returns meet or exceed expectations.

The attack, which occurred on September 11, 2021, targeted the Texas Republican Party's website, hosted by Epik.

The breach occurred when threat actors exploited a vulnerability in third-party software used by KDDI.

Attackers are employing sophisticated tactics, hiding malicious code behind convincing government branding and legal references to trick victims into downloading a ZIP archive, according to CYFIRMA.

A Department of Homeland Security inspector general report revealed that Secret Service agents routinely used personal cell phones for mission-critical communications, both domestically and internationally, often because government-issued devices...

Founded in 2023, Nebulock's AI-driven platform performs autonomous, vendor-agnostic threat hunts across endpoint, identity, cloud, network, and SaaS telemetry.

The campaign, dubbed "Poisoned Tenant" and discovered by Push Security, involves attackers creating fake OpenAI organizations using Gmail addresses but sending invitations from OpenAI's legitimate notification system.

The campaign, which Microsoft has not attributed to a known threat actor, uses lures referencing common hotel operational issues like guest complaints, bedbug infestations, and health inspections.