Security Bulletin

Both Tycoon and Storm-1575 have also been leveraging adversary-in-the-middle phishing to circumvent multifactor authentication protections.

Further examination of Notchy's activity revealed that the ALPHV/BlackCat affiliate may have been able to acquire the latest version of Cobalt Strike.

This blog provides an update on the nation-state attack that was detected by the Microsoft Security Team on January 12, 2024. As we shared, on January 19, the security team detected this attack on our corporate email systems and immediately activated...

SaaS breaches involve threat actors sneaking into an application and slowly exfiltrating data.

Attackers are creating hundreds of admin accounts, with a high potential for supply chain attacks.

Security pros say given the installed base of VMware products many companies have, it makes sense to apply the updates right away.

Reported losses suffered by U.S. victims of ransomware attacks jumped 74% last year, according to the agency’s latest IC3 annual report.

Aside from providing training on deepfake, artificial intelligence code poisoning, and zero-day intrusions, IBM's X-Force Cyber Range also offers simulations, such as Mission: Crisis Response, Business Response Challenge, and Cyber Wargame.

Reporting identity theft and credit freezes were noted by LexisNexis in letters of retribution sent to impacted individuals to potentially result in a denial of health, financial, and insurance services, claimed the lawsuit.

Ransomware infections reached 2,825 in 2023, an 18% increase over the previous year.

Discovered within the unsecured MongoDB database were troves of sensitive user data, including individuals' personal information, social media identifiers, and encrypted passwords.

PetSmart had its customers' online accounts subjected to credential stuffing attacks, which have prompted the company to implement a password reset for all accounts logged in during the intrusions.