Security Bulletin

Security Affairs reports the major Sweden grocery chain Coop has been claimed to be compromised by the Cactus ransomware operation, which warned of exposing more than 21,000 directories containing personal data.

Court Services Victoria, the court system of Australian state Victoria, had a portion of its audio-visual archive compromised in a ransomware attack, which resulted in the theft of criminal and civil hearing recordings from Nov. 1 to Dec. 21, the...

Massachusetts-based Anne Jaques Hospital of the Beth Israel-Lahey Health System had its emergency services and electronic health records systems disrupted by a cyberattack that reportedly commenced on Christmas Eve, reports The Record, a news site by...

Windows defenses evaded by new DLL search order takeover Windows 10 and Windows 11 systems could have their security defenses evaded to facilitate malicious code execution through a new dynamic link library search order hijacking technique, according...

BleepingComputer reports that expired authentication cookies are being revived for account access by numerous information-stealing malware strains by leveraging the newly discovered MultiLogin Google OAuth endpoint.

Phishing attacks using the novel JinxLoader malware loader have been launched to facilitate the deployment of the Formbook and XLoader payloads, reports The Hacker News.

Suspected Iranian state-backed hacking group Cyber Toufan has taken credit for compromising dozens of organizations across Israel in late November amid the ongoing Israel-Hamas war, according to The Record, a news site by cybersecurity firm Recorded...

Israel's cybersecurity industry made strides in the past year despite the backdrop of the war in Gaza.

Artificial intelligence (AI) is constantly evolving. How can security executives plan for something so unpredictable?

With more than three-quarters of countries adopting some form of data localization and, soon, three-quarters of people worldwide protected by privacy rules, companies need to take care.

Infostealers such as Lumma and Rhadamanthys have integrated the generation of persistent Google cookies through token manipulation.

AI may be inherently insecure, but only a handful of startups have put forward real visions to mitigate AI's threats and keep data private.