Security Bulletin

Ransomware gang ALPHV/BlackCat has taken responsibility for compromising British defense and security firm Ultra's subsidiary Ultra Intelligence & Communications in an attack, which was claimed to have resulted in a 30 GB data theft, Cybernews...

New York-based Refuah Health Center has been compelled by state Attorney General Letitia James to allocate more than $1.2 million to strengthen its cybersecurity posture through more robust patient data security, multi-factor authentication, and semi...

Outlogic, the data broker previously known as X-Mode Social, has been prohibited by the Federal Trade Commission from engaging in the sale of Americans' geolocation data following the exposure of religious affiliations, medical visits, and more...

Kyocera Device Manager instances impacted by the already patched path traversal vulnerability, tracked as CVE-2023-50916, could be targeted by threat actors to facilitate further malicious activity, including unauthorized account access and data...

AI/ML libraries create much larger attack surfaces, and traditional IT security lacks several key capabilities for protecting them.

Start-up funding for new Israeli cybersecurity companies has plummeted — and market-watchers expect that to continue throughout 2024.

An emerging threat actor, Water Curupira, is wielding a new, sophisticated loader in a series of thread-jacking phishing campaigns that precede ransomware.

Security pros noted that the first Patch Tuesday of 2024 was the second consecutive release by Microsoft with no zero-days.

The Nigerian national, who was living in the US, also must pay over $1 million in restitution.

Are Ukrainian cyberattacks against Iranian targets a blip or the beginning of a new trend?

Organizations hit by the Royal and Akira ransomware gangs have been approached by fake researchers claiming they can access and delete stolen files.

Here are four ways to get going implementing zero-trust.