Security Bulletin

The malware is written in C++ and uses a signed and notarized dropper to evade Gatekeeper.

The West African country advanced rules to force organizations to disclose cyberattacks, joining other nations in a shift to mandated transparency.

CardinalOps will give Cribl customers the ability to map detection rules and security controls to the MITRE ATT&CK framework. SecOps teams can identify coverage gaps and operationalize threat intelligence.

These vulnerable UEFI applications, primarily older versions of the shim bootloader, can allow attackers to execute untrusted code during system startup, according to ESET researcher Martin Smolár.

The ransomware group D1R claimed to have accessed a database of 40,000 entries from Synopsys and subsequently used this information to target Bosch, alleging the theft of valuable intellectual property.

The hearing, the first of its kind in Brussels regarding advanced AI risks, focused on Anthropic's cyber-capable models, Mythos and Fable, which are capable of identifying and exploiting software vulnerabilities.

A Welshman has been sentenced to prison for his involvement in numerous swatting incidents across the UK, US, and Canada. Callum Dare, 26, was an administrator for Doxbin, a dark web platform used for doxxing and facilitating harassment, according to...

The ShinyHunters group targeted Salesforce users by tricking them into authorizing a malicious Salesforce Data Loader application, which then requested OAuth permissions.

The vulnerability centers on how Cursor resolves Git binaries. An attacker can place a malicious file named "git.exe" at the root of a Git repository.

K8s-aibom functions as a controller that surfaces a bill of materials (BOM) for AI operations, exposing them across a user's cloud estate.

Fortinet Inc. has expanded its FortiEndpoint platform with new features designed to help companies monitor employee use of artificial intelligence tools and prevent sensitive data from leaking into them.