Security Bulletin

Try these steps to create an operational resilience action plan that will satisfy financial regulators and help sustain business without disruption.

The previously undocumented data exfiltration malware was part of a successful cyber-espionage campaign against the Guyanese government, likely by the Chinese.

With tools and hacker groups constantly evading defenses, expanding cybersecurity beyond endpoint security becomes crucial.

Nearly 100,000 ICS devices have been found open to the public Internet, potentially threatening physical safety globally. Here's how to quantify the risk.

Here are the most common misconfigurations plaguing large organizations, according to a new joint cybersecurity advisory.

The Predator spyware was distributed by dropping malicious links inside typosquatted facsimiles of news websites.

A campaign that's been active since April has already racked up nearly 75,000 downloads, stealing data and cryptocurrency in the process.

The malware uses software to evade detection while also making it difficult to analyze.

The vulnerabilities exist in the widely used TorchServe framework, used by Amazon, Google, Walmart, and many other heavy hitters.

A literal seven-nation (cyber) army wasn't enough to hold back the famous initial access broker (IAB) for long — it's been chugging along, spreading ransomware, despite a massive takedown in August.

This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q3 2023. It was last updated on November 8, 2023.

Patch now: The Atlassian security vulnerability appears to be a remotely exploitable privilege-escalation bug that cyberattackers could use to crack collaboration environments wide open.