Security Bulletin

“DeFi mining” scams adopted by pig-butchering rings create more problems for those trying to defend against them.

Latest iteration of the malware appears aimed at targets in Mexico.

Deepfakes are fast becoming more realistic, and access to them more democratic, enabling even ordinary attackers to enact major fraud. What's the most effective way to fight back?

Production systems at the remote access company were breached, leading AnyDesk to revoke code signing certificate and reset Web portal credentials as part of its incident response.

Air Force Gen. Timothy Haugh has taken the reins of the National Security Agency and Cyber Command from outgoing leader Army Gen. Paul Nakasone during a change-of-command ceremony on Feb. 2, according to The Record, a news site by cybersecurity firm...

Iranian Islamic Revolutionary Guard Corpss Cyber-Electronic Command Head Hamid Reza Lashgarian and five other officials of the IRGC-EC have been sanctioned by the U.S. Department of the Treasury's Office of Foreign Assets Control for their...

Mastodon account hijacking possible with critical bug Accounts in the decentralized social networking platform Mastodon could be remotely impersonated and taken over through the exploitation of a new critical origin validation error vulnerability...

Separate cyberattacks have been disclosed by Chicago-based Lurie Children's Hospital and the Village of Skokie in Illinois before the weekend, reports The Record, a news site by cybersecurity firm Recorded Future.

High-profile organizations around the world have been targeted with NTLM v2 hash relay attacks by Russian state-backed threat operation APT28, also known as Fancy Bear, BlueDelta, Pawn Storm, and Forest Blizzard, between April 2022 and November 2023...

Digitally generated versions of the company’s CFO and other colleagues were included in the call.

It's unclear if new SEC reporting rules played a role in the disclosures, but security pros say the new year is a period of openness.