Security Bulletin

First Health Advisory says the “nation-state” attackers used a LockBit strain to exploit the recent flaws reported in ConnectWise’s ScreenConnect app.

The revamped iMessage app uses Apple's new PQ3 post-quantum cryptographic protocol, which its engineers say will make it the most secure messaging app — but Signal's president begs to differ.

The growing threat of living-off-the-land tactics requires a rethink of network traffic visibility to prevent these types of attacks.

A vulnerability enabled Shortcuts to transmit data to websites without user permission.

First Brad and Jennifer, now Kim and Putin? Romance truly is dead, as North Korea is caught spying (again) on its partner to the north with the Konni malware.

In what could be an enforcement nightmare, potentially millions of dollars in fines, reputational damage, shareholder lawsuits, and other penalties await companies that fail to comply with the SEC's new data-breach disclosure rules.

Despite ransomware losses remaining high, privacy violations have quickly risen to second in a list of expected cyber insurance claims costs.

The FTC found that Avast collected reams of personal data through its antivirus product, then sold it to more than 100 third parties without disclosing its practices.

President of Malawi vows not to pay ransom to "appease criminals."

The move was promised last year after a Chinese hacking group stole U.S. government emails. It “will take time” to make the logs freely available to other organizations.

Hundreds of initial access brokers and cybercrime gangs are jumping on the max-critical CVE-2024-1709 authentication bypass, threatening orgs and downstream customers.