Security Bulletin

Kyocera Device Manager instances impacted by the already patched path traversal vulnerability, tracked as CVE-2023-50916, could be targeted by threat actors to facilitate further malicious activity, including unauthorized account access and data...

AI/ML libraries create much larger attack surfaces, and traditional IT security lacks several key capabilities for protecting them.

Start-up funding for new Israeli cybersecurity companies has plummeted — and market-watchers expect that to continue throughout 2024.

An emerging threat actor, Water Curupira, is wielding a new, sophisticated loader in a series of thread-jacking phishing campaigns that precede ransomware.

Security pros noted that the first Patch Tuesday of 2024 was the second consecutive release by Microsoft with no zero-days.

The Nigerian national, who was living in the US, also must pay over $1 million in restitution.

Are Ukrainian cyberattacks against Iranian targets a blip or the beginning of a new trend?

Organizations hit by the Royal and Akira ransomware gangs have been approached by fake researchers claiming they can access and delete stolen files.

Here are four ways to get going implementing zero-trust.

Reports say M9 Telecom servers were destroyed in retaliation for Russia-backed cyberattack against Kyivstar mobile phone operator.

A second, easy-to-exploit critical security vulnerability in Microsoft's first 2024 Patch Tuesday allows RCE within Hyper-Virtualization.

Cyberattackers are checking into the accounts of Booking.com's hotel partners, hoping to steal their visitor data.