Security Bulletin

Voice firewalls, call authentication and real-time fraud detection offer robust vishing prevention.

The chat infrastructure and data-leak site of the notorious ransomware-as-a-service group has been inactive since March 31, according to security vendors.

Jen Easterly, former director of CISA, discussed the first 100 days of the second Trump administration and criticized the president's "mandate for loyalty" during a panel at RSAC 2025.

Security Scorecard's Dr. Aleksandr Yampolskiy discusses securing what you don't own with supply chain detection and response.

Fortra's Rohit Dhamankar discusses Cobalt Strike abuse decreases by 80% with Fortra, Microsoft, Health-ISAC initiative.

Okta's Charlotte Wylie discusses securing non-human identities at scale in the era of AI agents.

While nation-state actors are demonstrating how easily they can infiltrate US networks, government officials don't seem to have a clear vision for what comes next.

Cyware's Jawahar Sivasankaran discusses the role of cyber threat intelligence in maturing security operations.

A SLAAC-spoofing, adversary-in-the-middle campaign is hiding the WizardNet backdoor malware inside updates for legitimate software and popular applications.

Outage shows how fast things change in the cyber underground.

China has been regarded by FBI Deputy Assistant Director Cynthia Kaiser to be the leading threat faced by U.S. critical infrastructure, with its state-backed threat operations leveraging artificial intelligence to facilitate increasingly efficient...

BleepingComputer reports that internet-exposed Git configuration files which could contain account credentials, access tokens, branch information, remote repository URLs, and automation scripts have been scanned by almost 4,800 unique IP addresses...