Security Bulletin

New York-based non-profit health providers Claxton-Hepburn Medical Center and Carthage Area Hospital have sought legal action to recover data stolen from a ransomware attack months ago from Massachusetts-based cloud storage provider Wasabi...

Security Affairs reports the major Sweden grocery chain Coop has been claimed to be compromised by the Cactus ransomware operation, which warned of exposing more than 21,000 directories containing personal data.

Court Services Victoria, the court system of Australian state Victoria, had a portion of its audio-visual archive compromised in a ransomware attack, which resulted in the theft of criminal and civil hearing recordings from Nov. 1 to Dec. 21, the...

Massachusetts-based Anne Jaques Hospital of the Beth Israel-Lahey Health System had its emergency services and electronic health records systems disrupted by a cyberattack that reportedly commenced on Christmas Eve, reports The Record, a news site by...

Windows defenses evaded by new DLL search order takeover Windows 10 and Windows 11 systems could have their security defenses evaded to facilitate malicious code execution through a new dynamic link library search order hijacking technique, according...

BleepingComputer reports that expired authentication cookies are being revived for account access by numerous information-stealing malware strains by leveraging the newly discovered MultiLogin Google OAuth endpoint.

Phishing attacks using the novel JinxLoader malware loader have been launched to facilitate the deployment of the Formbook and XLoader payloads, reports The Hacker News.

Suspected Iranian state-backed hacking group Cyber Toufan has taken credit for compromising dozens of organizations across Israel in late November amid the ongoing Israel-Hamas war, according to The Record, a news site by cybersecurity firm Recorded...

For HTTP, logging and fingerprinting browser user agents is standard practice. Many anti-automation tricks use the user agent and compare it to other browser artifacts, for example, supported JavaScript APIs, to detect bots. SSH offers an...

Israel's cybersecurity industry made strides in the past year despite the backdrop of the war in Gaza.

Artificial intelligence (AI) is constantly evolving. How can security executives plan for something so unpredictable?

With more than three-quarters of countries adopting some form of data localization and, soon, three-quarters of people worldwide protected by privacy rules, companies need to take care.