Security Bulletin

CISA urges federal and private-sector organizations to disconnect Ivanti VPNs vulnerable to zero-day flaws.

It is imperative that healthcare and health-tech companies move beyond reactive measures and adopt a proactive stance in safeguarding sensitive patient information.

The initiative is aimed at promoting policy, ethics, and expansion of AI in the country.

Cybersecurity Maturity Model Certification (CMMC) and a harden, detect, and respond mindset are key to protecting defense and critical infrastructure companies.

New sanctions aim to disrupt their cyber and financial operations.

The Justice Department and FBI confirmed they had disrupted the botnet run by a Chinese APT group targeting U.S. critical infrastructure.

Numerous security issues impacting Juniper Networks' Junos OS and its J-Web configuration interface leveraged by its EX switches and SRX firewalls have been resolved as part of recently issued updates, reports SecurityWeek.

BleepingComputer reports that the White Phoenix ransomware decryption tool has been made available on the web by CyberArk to ease the recovery from attacks involving ransomware strains with intermittent encryption, such as ALPHV/BlackCat, BianLian...

SiliconAngle reports that artificial intelligence-powered security and compliance solutions provider Runecast Solutions is set to be purchased by unified observability and security provider Dynatrace as part of its efforts to strengthen its security...

U.S. cloud infrastructure-as-a-service providers would be compelled to verify the identities of foreign users under a new proposed rule by the Department of Commerce's Bureau of Industry and Security in a bid to bolster defenses against foreign...

The Government and Accountability Office has disclosed that insights on the implementation of ransomware defenses among U.S. organizations in the energy, healthcare, manufacturing, and transportation industries have been lacking among six federal...

Organizations impacted by ransomware attacks increased by more than twofold between 2022 and 2023, as more threat actors resort to data extortion tactics, according to SecurityWeek.