Security Bulletin

A hacker could have "Rickrolled" the World Cup — or worse — thanks to FIFA's unenforced Entra access controls.

Klue's Battlecards is now the third integrated application that has been compromised to steal customers' Salesforce data, and victims include Huntress, the cybersecurity vendor.

The attacker utilized a multi-stage in-memory malware chain, including a VBScript stager, a PowerShell loader, and Havoc's Demon agent, to gain initial access.

This new practice marks a shift because IP addresses are considered personal data under GDPR and UK law, requiring user consent for such uses.

AWS Continuum utilizes model-agnostic AI, drawing from various frontier models to analyze structured data like infrastructure and code, as well as unstructured data such as documents and communications.

The campaign, involving nearly 8.9 million email addresses and linked to Romanian threat actors, utilized a compromised Bolivian government website to host the fraudulent Boots checkout page.

Recent research from Claroty's Team82 has uncovered critical vulnerabilities in widely deployed data center equipment, specifically in Vertiv's Uninterruptible Power Supply (UPS) network cards and Trane Tracer SC+ HVAC controllers.

Teams digging out of security debt need to answer only two simple questions: Which vulnerabilities in our systems are exposed, and how long should they stay that way?

AI speeds investigations, but packet capture provides proof.

Leaders need to know which suppliers matter most, and how quickly they can respond when one fails.