Security Bulletin

Patagonia, a U.S. outdoor recreation clothing retailer, was hit by a class action lawsuit alleging California privacy law violations stemming from its usage of services from artificial intelligence-powered customer service provider Talkdesk.

Threats to critical infrastructure are worse than ever, says Glenn Corn, ICIT's Sr. Director of Geopolitics and Global Threat Assessment.

While Microsoft dubbed the flaw as a high-severity spoofing bug, such an issue was disclosed by ZDI to be a remote code execution vulnerability that requires a higher severity rating.

Despite being both remote code execution and race condition flaws, CVE-2024-6409 poses a "lower" immediate impact due to the issues being present in the privsep child process with fewer privileges.

PyPi has immediately moved to revoke the authentication token, which had been given to PyPI Admin EE Durbin before March 3, 2023, reported JFrog researchers.

As we approach the opening ceremony, cybersecurity experts are gearing up to face an array of potential cyber threats

HardBit 4.0 has been further obscured through delivery via the Neshta virus, according to a Cybereason report.

Retail banks in the nation-state will eliminate the use of one-time passwords (OTPs) by bank customers in an effort to thwart phishing.

The new cybersecurity startup is focused on helping companies prepare and respond to a "cyber crisis" by consolidating the three Rs: readiness, response, and recovery.

Barracuda researchers discovered phishing links “wrapped” by legitimate URL protection services.

A newly disclosed vulnerability in the way source code is compiled could put enterprises at risk of upstream attacks.