Security Bulletin

Attackers are employing sophisticated tactics, hiding malicious code behind convincing government branding and legal references to trick victims into downloading a ZIP archive, according to CYFIRMA.

A Department of Homeland Security inspector general report revealed that Secret Service agents routinely used personal cell phones for mission-critical communications, both domestically and internationally, often because government-issued devices...

Founded in 2023, Nebulock's AI-driven platform performs autonomous, vendor-agnostic threat hunts across endpoint, identity, cloud, network, and SaaS telemetry.

The campaign, dubbed "Poisoned Tenant" and discovered by Push Security, involves attackers creating fake OpenAI organizations using Gmail addresses but sending invitations from OpenAI's legitimate notification system.

The campaign, which Microsoft has not attributed to a known threat actor, uses lures referencing common hotel operational issues like guest complaints, bedbug infestations, and health inspections.

The Athena coalition, led by Chainguard, will leverage artificial intelligence to proactively address vulnerabilities in open source code.

Adversaries could plant a malicious repository that can execute arbitrary code and steal cloud credentials by exploiting the vulnerability, which showcases growing MCP risk.

By fighting AI with AI, teams can stay one step ahead in the great innovation race.

Rising threats from third-party actors are forcing institutions to play defense to protect student data from ransomware and other attacks.

One of the flaws, DirtyClone, is a variant of the DirtyFrag vulnerability class.

The operation, a collaboration between Poland's Cybercrime Bureau (CBZC) and U.S. agencies including the FBI and Homeland Security Investigations, targeted a group accused of breaching telecommunications partners and hijacking email accounts.