Security Bulletin

Cybersecurity experts convened at Google's Boulder, Colorado, campus to address election threats, particularly the challenges posed by advanced technologies like deepfakes, CBS News reports.

A study by Amazon Web Services researchers has revealed critical security vulnerabilities in large language models that understand and respond to speech, which could allow them to be manipulated into generating harmful responses using sophisticated...

Security researchers have identified a design flaw in the IEEE 802.11 Wi-Fi standard that could allow malicious actors to trick users into connecting to less secure networks, The Hacker News reports.

HP's latest Wolf Security Threat Insights Report reveals that cybercriminals are employing "cat-phishing" techniques to deceive victims and using overdue invoice lures and Living-off-the-Land tactics to bypass security defenses, reports SiliconAngle.

The North Korea-linked Kimsuky hacking group has launched a new social engineering campaign targeting activists in the North Korean human rights and anti-North Korea sectors, The Hacker News reports.

A number of serious Windows bugs still haven't made their way into criminal circles, but that won't remain the case forever — and time is running short before ZDI releases exploit details.

Organizations must make software supply chain security a collaborative effort where everyone on the development team gets involved.

Island's Mikey Fey on how enterprise browsers combine security and productivity.

Intezer's Jim McDonough on what AI brings to the security table for SOC teams.

Vectra AI's Oliver Tavakoli on how GenAI affects XDR platforms.

SailPoint's Wendy Wu says identity is at the forefront of securing the enterprise.

GenAI, API and identity risks are key concerns, as well as conflicts between DevOps and SecOps.