Security Bulletin

VMware released a security advisory to address a vulnerability (CVE-2023-34063) in Aria Operations. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review VMware...

IAM providers had their own credentials stolen in 2023, and companies found they couldn’t quite quit passwords.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Numbers are often used in passwords to add complexity. Passwords submitted to honeypots are also often found within pre-existing passwords lists, containing compromised credentials. What numbers are most commonly used?

Dark Reading Research finds increased collaboration between security incident responders and groups within the HR, legal, and communications functions.

Developer-security company Snyk acquired Helois, a startup specializing in capturing security-relevant data from live applications.

Anyone who hasn't mitigated two zero-day security bugs in Ivanti VPNs may already be compromised by a Chinese nation-state actor.

The updated disclaimer follows Google’s agreement to settle a class-action privacy lawsuit.