Security Bulletin

CyberScoop reports that escalating cybersecurity threats against the U.S. water infrastructure have prompted the Environmental Protection Agency to commit to bolstering its security-focused inspections and enforcement activities in water utilities...

Italy's University of Siena, which is the world's first publicly funded university, was claimed to be compromised by the LockBit ransomware gang in an attack that has interrupted operations of several university services, reports The Cyber Express.

Hackread reports that cyberattacks aimed at the ongoing Indian general elections have risen by almost 300% since last year, with the polls being targeted by 16 independent hacktivist operations, including Anonymous Bangladesh and Anon Black Flag.

BleepingComputer reports that Israel and Albania have been subjected to attacks with an updated version of the BiBi Wiper malware with disk partition table deletion capabilities, which has been linked with suspected Iranian state-sponsored hacking...

Sophisticated Russian threat operation GitCaught has exploited both GitHub and FileZilla to facilitate the deployment of several malicious payloads, including the Atomic macOS Stealer, or AMOS, as well as the Octo, Lumma, and Vidar information...

Attacks exploiting a design vulnerability in the Foxit PDF reader have been launched by various threat actors to facilitate the delivery of several malicious payloads, including Agent Tesla, Remcos RAT, AsyncRAT, and XWorm, among others, reports The...

Microsoft Azure, Google Cloud Platform, Amazon Web Services, and other major cloud providers and technology firms could be compromised in attacks leveraging the critical memory corruption flaw within the widely used logging and metrics software...

The following is an excerpt from the 2024 Identiverse Trends Report.

CISOs are under the legal gun today – and that’s why they can only succeed if they have the full support of the C-suite.

The Siren email mailing list will focus on operational impact and response, acting as a central location to provide information about threats and necessary post-disclosure activities.

Fraudsters based in the US and Europe indicted for helping North Korea's nation-state groups establish fake freelancer identities and evade sanctions.

The new Secure Alternative Program from Google aims to entice customers away from Exchange Online and break Microsoft's dominance in enterprise.