Security Bulletin

If CEOs want to prevent their firm from being the next victim of a high-profile deepfake scam, they need to double cybersecurity funding immediately.

BleepingComputer reports that numerous Android apps with over four billion downloads are susceptible to the novel Dirty Stream attack, which involves the exploitation of a flaw in Android's content provider system that could enable arbitrary code...

Attacks with the novel Goldoon botnet have been deployed against vulnerable D-Link DIR-645 routers impacted by the almost 10-year-old critical arbitrary command execution bug, tracked as CVE-2015-2051, to facilitate further compromise, with...

Iranian state-backed hacking operation APT42 — also known as Mint Sandstorm, Mint Phosphorous, Charming Kitten, and TA453 — has spoofed major news organizations, including The Washington Post, think tanks, such as the McCain Institute, and internet...

The AI security startup’s platform will allow organizations to define appropriate AI usage and enforce security policies.

A longtime cybersecurity venture capitalist explains why some of his best investments are in people with military backgrounds who have an offensive mindset.

A Sophos X-Ops investigation finds that a wave of crude, cheap ransomware could spell trouble for small businesses and individuals – but also provide insights into threat actor career development and the wider threat landscape

The new startup’s SaaS platform claims to help organizations detect ransomware attacks faster than “traditional” methods and to recover within 24 hours.

Microsoft has uncovered a common vulnerability pattern in several apps allowing code execution; at least four of the apps have more than 500 million installations each; and one, Xiaomi's File Manager, has at least 1 billion installations.

More than 2,100 servers may still be vulnerable to GitLab password reset exploits.

Organizations can go a long way toward preventing spoofing attacks by changing one basic parameter in their DNS settings.

Actual legislation is a long shot and a decade away, but policy experts are looking to jump-start the conversation around greater legal liability for insecure software products.