Security Bulletin

Organizations have been subjected to attacks by initial access broker TA577, also known as Hive0118, aimed at exfiltrating Windows NT LAN Manager authentication data.

Attacks leveraging ConnectWise ScreenConnect vulnerabilities have been launched by North Korean state-sponsored hacking group Kimsuky.

The ALPHV/BlackCat ransomware operation had its servers and negotiation sites dismantled amid accusations from an affiliate behind the Change Healthcare attack.

Here are three ways to more effectively manage QR code attacks.

Apple stressed sideloading risks in a paper outlining its compliance with the Digital Markets Act.

Poorly governed identities have become a gateway for substantial incidents.

Security pros say this case illustrates why attackers go after third-party providers to penetrate major financial companies like American Express.

Human error has been named by chief technology officers around the world to be the most significant security threat against their organizations.

Cybersecurity experts have lauded the National Institute of Standards and Technology's newly released Cybersecurity Framework 2.0 for expanded coverage and additional resources.

Alireza Shafie Nasab has been charged by the U.S. for his involvement in the targeting of more than 200,000 devices in an attempt to hack U.S. government agencies.

Doorbell cameras manufactured by Chinese firm Eken Group were discovered by Consumer Reports to be impacted by several significant security flaws that could be leveraged to achieve unauthorized footage viewing or device takeovers.

Operators of the spyware have immediately rebounded with new infrastructure, with more than 80 delivery servers observed in the Philippines, Botswana, and at least nine other countries by the middle of January.