Security Bulletin

The Federal Communications Commission has introduced updated data breach rules for telecommunications firms that expand the definition of breach to unintended customer data access, use, or disclosure, according to The Record, a news site by...

SiliconAngle reports that cyberattacks involving 29 malware families have compromised 1,800 financial apps around the world during the past 12 months, indicating mounting mobile banking heists.

Idaho National Laboratory had data from 45,047 former and current employees, spouses, and dependents compromised following a cyberattack last month, which has been claimed by the SiegedSec hacking operation, reports The Record, a news site by...

More than 948,000 records from major nonprofit management software provider DonorView have been exposed online as a result of an insecure database, according to TechRadar.

U.S. multinational food and beverage company Kraft Heinz has launched an investigation into the Snatch ransomware gang's recently emerged claims of an August attack even though there has been no indication of any systems compromise, BleepingComputer...

More than $500,000 worth of cryptocurrency was noted by Blockaid to have been exfiltrated across 500 to 1,000 wallets following a cyberattack against crypto asset hardware wallet manufacturer Ledger's Ledger Connect Kit software, reports BNN...

Novel stealthy NKAbuse malware detailed BleepingComputer reports that Mexico-, Vietnam-, and Colombia-based Linux systems have been primarily impacted by the new stealthy NKAbuse multi-platform malware, which is the first-ever backdoor exploiting the...

New attacks involving the Pierogi++ malware have been launched by Hamas-affiliated threat operation Gaza Cybergang against Palestinian entities, The Hacker News reports.

Israeli organizations previously compromised by Iranian advanced persistent threat operation OilRig, also known as APT34, including a local government entity, a manufacturing firm, and healthcare organizations, have been targeted by the APT anew with...

AI will make Meta's smart glasses more attractive for consumers. But can the company straddle cutting-edge functionality and responsible data stewardship?

The large dental insurance company said protected health information was exposed, including details about dental procedures and claims payments.

CVE-2023-50164 is harder to exploit than the 2017 Struts bug behind the massive breach at Equifax, but don't underestimate the potential for attackers to use it in targeted attacks.