Security Bulletin

BleepingComputer reports that Scotland's National Health Service has been threatened by the INC Ransom extortion operation to expose 3 TB of data stolen from an attack this month.

Threat actors have launched a new phishing campaign using fraudulent bank payment notifications to facilitate the deployment of the Agent Tesla information-stealing and keylogging malware, The Hacker News reports.

The Cybersecurity and Infrastructure Security Agency has unveiled a draft cyber incident disclosure rule created under the Cyber Incident Reporting for Critical Infrastructure Act that would mandate organizations part of the 16 designated critical...

Attackers trigger hundreds of password reset prompts in an attempt to take over iCloud accounts.

CISA encouraged security teams handling industrial control systems to review and mitigate the Rockwell Automation bugs.

A certification for zero-trust could work much like it does for IoT products, offering a standard so buyers know new zero-trust products are secure.

Only 3% of organizations around the world were reported to be completely ready to deal with increasingly sophisticated cybersecurity threats, including ransomware attacks and supply chain intrusions, reports SiliconAngle.

The U.S. Department of Justice announced that Idaho and Montana resident Scott Rhodes was fined $9.9 million for conducting thousands of "illegal and malicious" robocalls, or automated phone calls, with disturbing pre-recorded messages across the U.S...

Severely lacking military coordination and recruitment for U.S. cybersecurity efforts have prompted the Foundation for Defense of Democracies to urge Congress to immediately advance an independent Cyber Force that would ensure the country's cyber...

Cyberespionage operations have been conducted by a pair of Chinese advanced persistent threat groups against organizations in countries part of the Association of Southeast Asian Nations since January, The Hacker News reports.

Major cyber risk quantification service provider DeNexus and cybersecurity firm Cipher Security have partnered to better evaluate industrial control system and operational technology cybersecurity risks faced by critical infrastructure organizations...