Security Bulletin

Outlogic, the data broker previously known as X-Mode Social, has been prohibited by the Federal Trade Commission from engaging in the sale of Americans' geolocation data following the exposure of religious affiliations, medical visits, and more...

Kyocera Device Manager instances impacted by the already patched path traversal vulnerability, tracked as CVE-2023-50916, could be targeted by threat actors to facilitate further malicious activity, including unauthorized account access and data...

AI/ML libraries create much larger attack surfaces, and traditional IT security lacks several key capabilities for protecting them.

Leveraging a validated architecture for Utility Substation Automation.

Start-up funding for new Israeli cybersecurity companies has plummeted — and market-watchers expect that to continue throughout 2024.

An emerging threat actor, Water Curupira, is wielding a new, sophisticated loader in a series of thread-jacking phishing campaigns that precede ransomware.

If you happen to be at the NRF’24 in NYC on January 14-16th, please come by the Cisco booth 5639 and meet with us to learn more.

Security pros noted that the first Patch Tuesday of 2024 was the second consecutive release by Microsoft with no zero-days.

The Nigerian national, who was living in the US, also must pay over $1 million in restitution.

Are Ukrainian cyberattacks against Iranian targets a blip or the beginning of a new trend?

Organizations hit by the Royal and Akira ransomware gangs have been approached by fake researchers claiming they can access and delete stolen files.

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerability These types of vulnerabilities are frequent...