Security Bulletin

Vehicles are required to meet basic safety standards. Having similar requirements for software would give consumers greater control over their privacy and security.

The security holes can allow server takeover, information theft, model poisoning, and more.

The security vulnerability in a component of a widely used JavaScript implementation of Bitcoin makes passwords guessable via brute-force attacks.

Cybersecurity investment involves more than just buying security technologies — organizations are also looking at threat intelligence, risk assessment, cyber-insurance, and third-party risk management.

At least four separate campaigns against CVE-2023-37580 in the popular Zimbra Collaboration Suite aimed to siphon up reams of sensitive mail data.

More than half of organizations are nowhere near ditching passwords, even as cyberattackers continue to have a field day with workers' poor credential choices.

TAG’s discovery of a 0-day exploit used to steal email data from international government organizations.

Cybercriminals are playing both sides with simple disaster scams, and it's working.

The medical transcription company Perry Johnson & Associates provides services to multiple U.S. healthcare organizations and the breach is the sector’s second largest this year.

People are not robots; their decisions are based on emotion as much as data. Often, this can lead them to make mistakes with serious security implications for the business.

Exclusive Insights from the RSAC Executive Security Action Forum (ESAF)

Microsoft fixed three vulnerabilities that threat actors are exploiting, part of its' Patch Tuesday bug fix roundup.