For individuals

Congratulations to all the researchers recognized in this quarter’s Microsoft Researcher Recognition Program leaderboard! Thank you to everyone for your hard work and continued partnership to secure customers. The top three researchers of the 2023 Q3 Security Researcher Leaderboard are Wei, VictorV, and Anonymous! Check out the full list of researchers recognized this quarter here.

Bugcrowd signs the open letter with 55 others to ask the EU to reconsider its proposed 24-hour reporting requirement for vulnerability disclosures exploited in the wild.

A social engineering phone call lends authenticity to the attacker's malicious email.

Progress Software plans to collect millions in cyber insurance policy payouts after the MOVEit breaches, which will make getting coverage more expensive and harder to get for everyone else, experts say.

CISA and FBI warn the RaaS provider's affiliates are striking critical industries, with more attacks expected to come from additional ransomware groups in the months ahead.

Microsoft Entra ID support has been integrated by enterprise identity protection startup Semperis into its attack path management tool Forest Druid in a bid to better combat cybersecurity threats against on-premises Active Directory and cloud systems, SiliconAngle reports.

California Gov. Gavin Newsom has approved into law legislation that would enable the state's cybersecurity agency CAL-SIC to provide assistance to K-12 schools amid the growing prevalence of K-12 cyberattacks, reports CBS Bay Area.

The U.S. Environmental Protection Agency has withdrawn its guidance requiring cybersecurity audits for water utilities across the country following a lawsuit filed by Arkansas, Iowa, and Missouri and supported by trade groups that challenged the viability of water utility cybersecurity regulation in the long term, according to CyberScoop.

TechCrunch reports that French cloud gaming startup Shadow had its customers' personal data compromised in a data breach stemming from a social engineering attack against an employee last month.

Threat actors have targeted .NET developers with a malicious NuGet package typosquatting the Pathoschild.Stardew.ModBuildConfig deploying the SeroXen RAT, The Hacker News reports.