Security Bulletin

Organizations have struggled to make zero trust a reality. Could AI make the difference?

Private spyware vendors were behind nearly half of all zero-day exploits in Google products since 2014.

This report documents the rise of commercial surveillance vendors and the industry that threatens free speech, the free press and the open internet.

“DeFi mining” scams adopted by pig-butchering rings create more problems for those trying to defend against them.

Latest iteration of the malware appears aimed at targets in Mexico.

Deepfakes are fast becoming more realistic, and access to them more democratic, enabling even ordinary attackers to enact major fraud. What's the most effective way to fight back?

Production systems at the remote access company were breached, leading AnyDesk to revoke code signing certificate and reset Web portal credentials as part of its incident response.

Air Force Gen. Timothy Haugh has taken the reins of the National Security Agency and Cyber Command from outgoing leader Army Gen. Paul Nakasone during a change-of-command ceremony on Feb. 2, according to The Record, a news site by cybersecurity firm...

Iranian Islamic Revolutionary Guard Corpss Cyber-Electronic Command Head Hamid Reza Lashgarian and five other officials of the IRGC-EC have been sanctioned by the U.S. Department of the Treasury's Office of Foreign Assets Control for their...

Mastodon account hijacking possible with critical bug Accounts in the decentralized social networking platform Mastodon could be remotely impersonated and taken over through the exploitation of a new critical origin validation error vulnerability...