Security Bulletin

UK public service broadcaster BBC had information from nearly 25,290 current and former employees exfiltrated following a data breach of its occupational pension scheme, which is one of the largest across the country, according to The Guardian.

Mounting backlogs of unanalyzed and unenriched software and hardware flaws submitted to the National Institute of Standards and Technology's National Vulnerability Database since funding cuts were conducted in early February have prompted the agency...

CNN reports that operations at major U.S. nonprofit hospital network Ascension continue to be hobbled by a ransomware attack earlier this month, which nurses at its hospitals noted have begun to endanger patient safety amid the lack of "safety...

By adopting a stance of coordinated disclosure for exploits, security researchers can give organizations time to patch vulnerabilities before they are exploited in the wild.

Numerous Okta customers were reported by the leading identity and access management service provider to have been subjected to credential stuffing attacks targeting the cross-origin authentication functionality of its Customer Identity Cloud offering...

Stealthy ad fraud rings turn legitimate marketing into spam at a large scale, creating 200M+ bid requests daily.

Security teams should understand their providers' approach to data privacy, transparency, user guidance, and secure design and development.

Attacks on the big healthcare groups only underscore the rise in targeted attacks against all healthcare organizations.

When security professionals are at the end of their rope — feeling both mentally and physically exhausted — it's often because of burnout. Here are ways to combat it.

It's unclear whether a dataset for sale on the site allegedly containing data from more than 500 million Ticketmaster users is real or just law enforcement bait.