Security Bulletin

Vulnerability CVE-2024-23204, affecting Apple's popular Shortcuts app, suggests a critical need for ongoing security awareness in the macOS and iOS ecosystem.

Operation Texonto spanned several months, using various Russian propaganda lures and spear-phishing to misinform and trick users into giving up Microsoft 365 credentials.

Manufacturing consistently trends among the most heavily targeted by active adversaries.

Active adversaries will do whatever it takes to infiltrate their target.

Amid a spike in attacks, now is a good time for brands to strengthen their cybersecurity strategy.

The passwordless dream remains elusive, but expect more progress in 2024 and heading into next year.

The latest ploy by the APT also known as Charming Cypress targets policy experts in the Middle East, Europe, and the US.

The U.S. National Security announced the retirement of its active Cybersecurity Director following 34-year career at the agency.

BleepingComputer reports that Knight ransomware was observed by KELA threat analysts to have the third iteration of its source code posted for sale by the operation's representative, Cyclops, on RAMP forums.

Over 1.5 million malicious emails have evaded secure email gateways in 2023, representing a 37% and 310% growth over 2022 and 2021, respectively, reports SiliconAngle.

CyberScoop reports that ransomware attacks against the industrial sector have reached 905 in 2023, representing a 50% increase over the previous year.