Security Bulletin

In the notice letter sent out to affected individuals, U-Haul notes that credit card information was not accessed in the breach.

CISA and its counterparts in the UK and other countries this week offered new guidance on how to deal with the threat actor's recent shift to cloud attacks.

Apple's PQ3 for securing iMessage and Signal's PQXH show how organizations are preparing for a future in which encryption protocols must be exponentially harder to crack.

A new infostealer spreading to organizations across Mexico heralds 2024's fresh season of tax-themed phishing attacks.

Initial reports that the malware strain involved a LockBit affiliate, but recent data suggests an ALPHV/BlackCat link.

Developer-driven security programs place the development team at the center of reducing vulnerabilities.

The Russian hacking group switched to attacking cloud-hosted networks to gain initial access.

Trusted brands like The Economist are also among the 8,000 entities compromised by Operation SubdoMailing, which is at the heart of a larger operation of a single threat actor.

Litigation and regulatory enforcement are increasing risks for companies and cybersecurity leaders. Something must be done to protect the profession.

Threat actors could leverage the null pointer deference flaw in Zyxel firewall products to facilitate denial-of-service conditions in vulnerable firewalls with activated "Anti-Malware" functionality.

The U.S. Department of Energy has introduced a new $45 million cybersecurity research grant aimed at strengthening the energy industry against increasingly prevalent and sophisticated cybersecurity threats.