Security Bulletin

A top financial entity warned that its brand is being used to spread cyber scams, as fraud efforts persist throughout the country.

A critical zero-click account takeover exploit affects GitLab Community and Enterprise Editions.

Misunderstanding the permissions of an authentication group in Google Kubernetes Engine (GKE) opens millions of containers to anyone with a Google account.

A psyop targeting ordinary moviegoers is the latest in a string of similar attacks in the country since Oct. 7.

For the second time in a week, a leading tech firm revealed it was compromised by APT29.

Establishing a unified and comprehensive security framework in a multicloud, hybrid work environment is challenging. Attackers are more sophisticated than ever, coupled with a need to constantly ingest new vendors and new tools—we are at an...

Post-SolarWinds, it's no longer enough for chief information security officers to remain compliant and call it a day.

While technology innovations promise to deliver significant results for business managers, the reality of implementation and adoption is often very different. This blog from IDC shares how life-cycle services can help.

Organizational leaders increasingly recognize that privacy is more than a compliance exercise – it is a business imperative that is tied to customer trust.

By combining the strengths of the fraud and security teams, companies can get the visibility – and context – they need to keep their users, customers, and business partners safe.

Cisco released a security advisory to address a vulnerability (CVE-2024-20253) affecting multiple Unified Communications Products. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages users and...