Security Bulletin

More than $100 million has been stolen from cryptocurrency trading platform Poloniex following a cryptocurrency heist on Nov. 10, according to The Record, a news site by cybersecurity firm Recorded Future.

Novel social engineering attack infrastructure established by BlueNoroff New fraudulent skills assessment portals have been established by North Korean hacking operation BlueNoroff, also known as Sapphire Sleet, as part of its new infrastructure for...

Operators of the BiBi wiper malware initially reported to have been used to target Israeli firms' Linux systems amid the ongoing war between Israel and Palestinian militant group Hamas have also developed a version of the payload aimed at Windows...

The influx of generative AI could cause security leaders to learn new skills and defensive tactics.

Threat actors distributed an archive containing images of new products by major clothing companies, along with a malicious executable disguised with a PDF icon.

Complexity impedes the universal and consistent application of security policy, which is an obstacle to adequately securing government environments.

The country has signed fresh deals to boost cyber intelligence and preparedness capabilities.

BleepingComputer reports that numerous healthcare organizations across the U.S. have been targeted in a potentially ongoing attack campaign leveraging pharmacy supply chain and management systems provider Transaction Data Systems' ScreenConnect...

BleepingComputer reports that self-proclaimed hacktivist operation Anonymous Sudan, also known as Storm-1359, has admitted to deploying a distributed denial-of-service attack that disrupted the website of Cloudflare.

The technical controls that provide the most anti-ransomware capabilities for the dollar are not necessarily expensive or require much in the way of staff to manage, such as multi-factor authentication, regular data backups, and enforcing good access...

The short-lived ransomware gang’s assets are going cheap, its affiliates are expected to move on to other extortion activities.

A federal push to enforce cybersecurity requirements is holding public companies and government contractors accountable as a matter of law and for national security.