Security Bulletin

Ivanti has released a security update to address an authentication bypass vulnerability (CVE-2023-46805) and a command injection vulnerability (CVE-2024-21887) in all supported versions (9.x and 22.x) of Connect Secure and Policy Secure gateways. A...

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability CVE-2023-46805 Ivanti Connect...

Here are four ways to get going implementing zero-trust.

Reports say M9 Telecom servers were destroyed in retaliation for Russia-backed cyberattack against Kyivstar mobile phone operator.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Microsoft today surprised with a light patch Tuesday. We only received 48 patches for Microsoft products and four for Chromium, affecting Microsoft Edge. Only two of the 48 patches are rated critical; none had been disclosed or exploited before today...

A second, easy-to-exploit critical security vulnerability in Microsoft's first 2024 Patch Tuesday allows RCE within Hyper-Virtualization.

Cyberattackers are checking into the accounts of Booking.com's hotel partners, hoping to steal their visitor data.

A free decryptor is available to recover files affected by Babuk malware variant targeting Microsoft Exchange.

A printer bug could lead to much worse, in IT networks without proper segmentation.

SiliconAngle reports that cybersecurity firm Trustwave has entered a deal to be acquired by The Chertoff Group's affiliate growth equity fund MC2 Security Fund, the terms of which were not disclosed.

After adding 267,000 IT jobs in 2022, the U.S. only had an additional 700 jobs last year amid massive layoffs that were also accompanied by organizations' course correction after overhiring due to the pandemic and the increasing implementation of...