Security Bulletin

Caller ID spoofing and AI voice deepfakes are supercharging phone scams. Fortunately, we have tools that help organizations and people protect themselves against the devious combination.

Modern networks teem with machine accounts tasked with simple automated tasks yet given too many privileges and left unmonitored. Resolve that situation and you close an attack vector.

While a longstanding method, the scale and systematic execution of the attacks signify an escalation, security pros said.

"Kapeka" and "Fuxnet" are the latest examples of malware to emerge from the long-standing conflict between the two countries.

Attackers exploited a critical vulnerability to create a new administrator account.

Once attackers have control over a workload in the cluster, they can leverage access for lateral movement both inside the cluster and to external resources.

Users will need to download the latest version of Ivanti's Avalanche to apply fixes for all of the bugs.

The U.S. Department of Justice announced that former Amazon security engineer Shakeeb Ahmed was given a three-year prison sentence after exfiltrating more than $12.3 million from two decentralized finance cryptocurrency exchanges hacked in July 2022...

Cybernews reports that bot attacks have increased by almost twofold in 2023, with the highest activity observed during the fourth quarter.

New guidelines addressing ethical concerns regarding the intelligence community's acquisition of Americans' commercially available information are set to be unveiled by the Office of the Director of National Intelligence, according to The Record, a...