Security Bulletin

Following SEC filing, insurer says ransomware group stole personal data in February cyberattack.

NIST says it has asked partner agencies for assistance as it works on a long-term solution to keeping the vital CVE database up to date.

Nearly 250 Indian nationals who were forced into performing cyber fraud schemes in Cambodia have already been repatriated by the Indian government, according to The Hacker News.

Billions of records with personal information gathered from U.S. users of Google Chrome will be removed by Google to settle a class-action lawsuit alleging illegal surveillance practices, reports The Associated Press.

Artificial intelligence was emphasized by federal cyber officials to serve as helpers, not replacements, for the cybersecurity workforce amid growing concerns brought upon by AI innovations, FedScoop reports.

Online shopping platform PandaBuy had more than 1.3 million customers' data exposed following a cyberattack claimed by Sanggiero to have been conducted in partnership with IntelBroker, reports BleepingComputer.

MarineMax has disclosed having employee and customer data stolen from its systems following a cyberattack last month, BleepingComputer reports.

Major U.S. insurance provider Prudential Insurance has confirmed that data from 36,545 individuals had been compromised following a cyberattack in February, which the ALPHV/BlackCat ransomware operation claimed, reports The Record, a news site by...

Security Affairs reports that the Open Web Application Security Project Foundation had data from its earliest members exposed as a result of an old Wiki web server misconfiguration.

Almost 30 malicious VPN apps with proxyware enabled by a Golang library allowed Android devices to perform as residential proxies that could be leveraged for illicit cyber activity as part of the PROXYLIB operation, reports The Hacker News.