Security Bulletin

The sophisticated APT employs various tactics to abuse Windows and other built-in protocols with both custom and public malware to take over victim systems.

Google's Threat Analysis Group analyzes recent state-sponsored campaigns exploiting the WinRAR vulnerability, CVE-2023-38831.

Christopher Wray and other Western intelligence agency leaders used a public forum in California to present a united front against China’s industrial spying.

Building a culture of cybersecurity is achievable by acknowledging its importance and consistently reinforcing that message.

The hacktivists known as SiegedSec identify ICS targets, but there's no evidence of attacks yet.

For Israeli startups and those closely linked to the country, the deepening crisis in the Middle East following the deadly Hamas attacks of Oct. 7 pose a fraught mix of complications.

The "CISO Survival Guide" explores the complex and shifting challenges, perceptions, and innovations that will shape how organizations securely expand in the future.

If not correctly locked down, Jupyter Notebook offers a novel initial access vector that hackers can use to compromise enterprise cloud environments, as seen in a recent hacking incident.

As President Biden gets set to visit Israel in the midst of the Middle East Crisis, organizations must start by understanding that cyber warfare knows no borders, then band together as a world community to counteract the threats.

The move by the e-commerce kahuna to offer advanced authentication to its 300+ million users has the potential to move the needle on the technology's adoption, security experts say.

Once ethics guardrails are breached, generative AI and LLMs could become nearly unlimited in its capacity to enable evil acts, researchers warn.