Security Bulletin

PoC exploit code for flaw is publicly available, heightening breach risks for users of the managed file-transfer technology.

As cyberattackers increasingly target water suppliers and wastewater utilities, the US federal government wants to help limit the impact of destructive attacks.

The effort will train 100 women in technology and cybersecurity around artificial intelligence concepts.

An emerging actor is the latest to deploy a tactic that terminates AV processes and services before deploying its payload; the campaign is part of a bigger "bring your own vulnerable driver" trend.

The startup, which announced $5 million in seed funding, secures enterprises against the risks generative AI brings.

Veterans are ideal candidates to close the skills gap and create the industry needed to meet security threats head-on.

With the rush to adopt large language models, companies have not thought through all of the security implications to their businesses. Two groups of researchers tackle the questions.

With a PoC for exploiting the file sharing software already available, users are urged to patch immediately.

Here’s why a common operational platform based on SASE can solve the lion’s share of cloud security challenges for companies.

In the second of our new technical thought leadership series, Sophos X-Ops takes a detailed look at anti-ransomware techniques

Twenty-six billion records amounting to 12TB of data, a significant amount of which was compiled from prior data breaches, have been exposed as part of a colossal leak, which has been regarded as the Mother of all Breaches, according to Cybernews.