Security Bulletin

SecurityWeek reports that escalating exploitation of VPN vulnerabilities to facilitate significant cyber incidents has prompted the FBI, Cybersecurity and Infrastructure Security Agency, the Canadian Centre for Cyber Security, and New Zealand's...

Attackers could leverage a pair of medium-severity vulnerabilities in the Mailcow open-source mail server software older than version 2024-04 to facilitate arbitrary code execution, account takeovers, and sensitive data access, reports The Hacker...

Amtrak had some of its Guest Rewards customers' data compromised following a credential stuffing attack last month, The Register reports.

BleepingComputer reports that U.S. industrial forklift truck maker Crown Equipment confirmed that its manufacturing operations have been disrupted following a cyberattack earlier this month that led to the takedown of all its IT systems.

Explore 3 ways your K12 school can leverage ESSER funding for new technologies that increase security, collaboration, and distance learning.

The updated framework is an equalizer for smaller organizations to meet the industry at its breakneck pace of innovation.

[This is a Guest Diary by Owen Slubowski, an ISC intern as part of the SANS.edu BACS program]

By integrating environmental initiatives, social responsibility, and governance into their strategies, security helps advance ESG goals.

The service, likely a rebrand of a previous operation called "Caffeine," mainly targets financial institutions in the Americas and EMEA and uses malicious QR codes and other advanced evasion tactics.

By offering to buy Atos' big data and cybersecurity operations. Paris is trying to make sure key technologies do not fall under foreign control.

A reader contacted me with an eml file (which turned out to be benign) that emldump.py could not parse correctly.

Cops decimate cybercrime infrastructure used to steal data from nearly 2,000 people in Singapore last year.