Security Bulletin

Offshore wind farms leveraging voltage source converter-based high voltage direct current connections are vulnerable to cyberattacks that could compromise sensors to prompt power oscillations that could trigger blackouts and equipment damage...

With rampant K-12 breaches fueling a fraud epidemic, cooperation and resolve are needed for progress.

The vulnerability, tracked as CVE-2024-20253, makes enterprise communications infrastructure and customer service call centers sitting ducks for unauthenticated cyberattackers.

A sporty, modular downloader allows hackers to cherry-pick their exploits — in this case, two powerful tools for gaining admin access in a Windows system.

A top financial entity warned that its brand is being used to spread cyber scams, as fraud efforts persist throughout the country.

A critical zero-click account takeover exploit affects GitLab Community and Enterprise Editions.

Misunderstanding the permissions of an authentication group in Google Kubernetes Engine (GKE) opens millions of containers to anyone with a Google account.

A psyop targeting ordinary moviegoers is the latest in a string of similar attacks in the country since Oct. 7.

For the second time in a week, a leading tech firm revealed it was compromised by APT29.

Post-SolarWinds, it's no longer enough for chief information security officers to remain compliant and call it a day.

By combining the strengths of the fraud and security teams, companies can get the visibility – and context – they need to keep their users, customers, and business partners safe.