Security Bulletin

CVE-2024-6385, like another bug patched last month, could allow attackers to run pipelines as any user.

Users receiving the warnings are likely being targeted based on who they are or what they do, according to the vendor.

Microsoft’s notorious Internet Explorer has been brought out of retirement by threat actors using its security holes to serve malware.

It's time to wipe off the flattering grease paint and instead make executives see the real face of cybersecurity that works.

Threat actors had access to the automotive provider's networks for more than a month before they were discovered.

Akamai researchers say its honeypots found numerous attempts to exploit recently disclosed vulnerability.

A new end-to-end toolkit circulating on the Dark Web significantly lowers the barrier to entry for creating sophisticated campaigns that can avoid most traditional security detection and protection systems.

The integration of Entra Identity offerings with new security service edge (SSE) services to provide unified conditional access is seeking enterprise approval.

Companies need robust cyber-response plans and a straightforward path to transparency.

Remember when hackers used to write their own malware? Kids these days don't want to work, they just want freely available tools to do it for them.

While the new policy could be adopted based on Snowflake customers' preferences, OAuth and other key-pair authentication systems are still recommended for service users.

Organizations affected by the breach have been urged by security researcher and former Microsoft employee Kevin Beaumont to be vigilant of the emails, which were not sent in adherence to the Microsoft 365 breach process.