Security Bulletin

Reports say M9 Telecom servers were destroyed in retaliation for Russia-backed cyberattack against Kyivstar mobile phone operator.

A second, easy-to-exploit critical security vulnerability in Microsoft's first 2024 Patch Tuesday allows RCE within Hyper-Virtualization.

Cyberattackers are checking into the accounts of Booking.com's hotel partners, hoping to steal their visitor data.

A free decryptor is available to recover files affected by Babuk malware variant targeting Microsoft Exchange.

A printer bug could lead to much worse, in IT networks without proper segmentation.

SiliconAngle reports that cybersecurity firm Trustwave has entered a deal to be acquired by The Chertoff Group's affiliate growth equity fund MC2 Security Fund, the terms of which were not disclosed.

After adding 267,000 IT jobs in 2022, the U.S. only had an additional 700 jobs last year amid massive layoffs that were also accompanied by organizations' course correction after overhiring due to the pandemic and the increasing implementation of...

Fixes have been released by QNAP to address 12 security flaws, many of which are high-severity, impacting its various products, according to SecurityWeek.

Ransomware operation LockBit has admitted to being behind a cyberattack that disrupted the IT systems of healthcare system Capital Health, which operates hospitals and clinics in New Jersey and Pennsylvania, in November, BleepingComputer reports.

Global Christian inter-church organization World Council of Churches had all of its systems disrupted following a ransomware attack on Dec. 26, which the Lutheran World Foundation, one of its members, has confirmed to be related to an incident that...

Hacked YouTube channels leveraged for Lumma Stealer distribution Several YouTube channels have been compromised to enable the distribution of the Lumma Stealer information-stealing malware via videos purporting to share cracked versions of legitimate...

BleepingComputer reports that Netgear and Hyundai Middle East & Africa had their official accounts on X, formerly Twitter, compromised to facilitate the distribution of cryptocurrency wallet drainer malware.