Security Bulletin

Hospitals and other healthcare organizations across the U.S. have been warned of ongoing attacks leveraging the critical Citrix Bleed vulnerability.

Outages have been experienced by nearly 60 credit unions across the U.S. following a ransomware attack against a credit union technology firm.

Mobile banking users in Indonesia, Vietnam, and Thailand have been targeted in attacks deploying the novel FjordPhantom Android banking trojan.

Organizations in the government, real estate, telecommunications, retail, and other sectors across the U.S., Africa, and the Middle East have been subjected to intrusions under the new CL-STA-0002 threat cluster.

Novel Turtle ransomware targets macOS devices Apple's macOS devices are being targeted by the new Turtle ransomware strain.

BleepingComputer reports that nearly 20,000 Microsoft Exchange servers that have reached end-of-life continue to be exposed to the internet and are at risk of remote code execution attacks.

The U.S.'s cybersecurity model being centered on the immediate discovery and remediation of vulnerabilities has been called a "failed model" by CISA.

Default passwords enabled the Iranian-linked APT to compromise Israeli-made control systems at water and wastewater facilities, a public aquarium and a brewery.

Come up with a clever cybersecurity-related caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

Why we should applaud the Red Cross's efforts, even if they likely won't work.

Now that CISOs face prosecution and even jail time, it’s more important than ever to educate the entire C-Suite and board on cybersecurity risks.

Interpol has upgraded its biometric background check tech. It'll help catch criminals, but will it protect sensitive, immutable data belonging to the innocent?