Security Bulletin

The arbitrary file-read flaw can lead to remote code execution.

Responding to SEC charges, SolarWinds fired back with a detailed defense of how a Russian-backed cyber espionage attack on its system was handled.

Federal agencies reported Monday completing the 90-day actions tasked by a Biden administration order to secure artificial intelligence (AI). Here's what you need to know.

A national nonprofit organization that supports victims of identity crime reported that the 3,205 data compromises in 2023 in the U.S. set a new record, and was up 72% from the previous all-time high set in 2021.

Insurance companies have a unique view of the ravages of ransomware, which lets us formulate lessons in how to avoid becoming a victim.

Networks of Iranian officials and cyber-offensive specialists have created a variety of cybersecurity contractors in an attempt to dodge sanctions, according to leaked documents.

Sunday night, Freehold Township district officials notified its staff and parents that school would not be in session Monday due to technical difficulties caused by a cyber incident.

Take a look at last year's most impactful data breaches and what companies can do to protect themselves going forward.

Microsoft said it was also compromised via the same OAuth app abuse it warned about and offers tips to detect and protect.

Companies with fewer than 20 employees suffered the largest number of attacks among small to midsize businesses, according to Israel's Small and Medium Business Agency.

The Network Resilience Coalition pushes adoption of standards like SSDF, OpenEoX and CISA's Secure By Design and Default framework.