Security Bulletin

Intrusions targeting a high-level Southeast Asian government agency have been deployed by three clusters of Chinese state-backed hackers over nearly two years as part of the Crimson Palace cyberespionage campaign aimed at exfiltrating intelligence...

Emergent RansomHub ransomware — which was leveraged in attacks against Change Healthcare, Frontier Communications, and Christie's auction house — was discovered by Symantec researchers to be an evolved iteration of the Knight ransomware, also known...

Major U.S. automotive aftermarket parts vendor Advance Auto Parts had 3 TB of data containing sensitive customer and employee details claimed to be stolen by the threat actor dubbed "Sp1d3r" following the compromise of its Snowflake cloud storage...

In the rush to digital transformation, many organizations are exposed to security risks associated with citizen developer applications without even knowing it.

Inside the baseball team's strategy for building next-gen security operations through zero trust and a raft of future initiatives aiming to safeguard team data, fan info, and the iconic Fenway Park — which, by the way, is now a smart stadium.

As the largest investor in ChatGPT and developers of Copilot, Microsoft has become an important AI stakeholder and innovator – the company aims to foster responsible use of AI led by humans.

With companies pouring billions into AI software and hardware, these installations need to be protected from cybersecurity threats and other security lapses.

The RaaS group leverages double extortion and tends to target large enterprises and healthcare.

The cloud IT service provider acknowledged a threat actor accessed demo accounts via stolen credentials.

CVE-2020-1472 is a privilege escalation flaw that allows an attacker to take over an organization's domain controllers.