Security Bulletin

Thousands of vulnerable servers may be open to cyberattacks exploiting the max-severity CVE-2023-46604 bug.

Even the most careful VMware customers may need to go back and double check that they weren't compromised by a zero-day exploit for CVE-2023-34048.

Russian state-sponsored threat actor Nobelium used a basic password-spray attack to breach Microsoft corporate email accounts, including for execs.

Based on fresh infection routines the APT is testing, it's looking to harvest threat intelligence in order to improve operational security and stealth.

The company, Modern Solutions, had misconfigured a cloud database, but argues the contractor could only have found the password through insider knowledge.

The Kremlin-linked threat group’s victims include cybersecurity staffers and members of the software giant’s senior leadership team.

The agreement to enable future sharing of information and experience is part of a spate of inter-country threat intelligence agreements that Israel is signing, as war-related attacks ramp up.

Why we need tools that can deliver visibility both in the cloud and on-prem.

Social engineering drives password-stealing malware attack against the front desk

Security researchers say they recorded several thousands exploit attempts on Atlassian Confluence RCE originating from more than 600 unique IP addresses.