Security Bulletin

While cloud security investments are starting to pay off, respondents to a CyberRisk Alliance survey say their organizations still face skills gaps and lack visibility into the cloud.

The future of the cybersecurity workforce will rely less on long-led legacy education models and more on skills-now training.

Atlassian CISO warns Confluence Data Center and Server customers they're vulnerable to "significant data loss" if all on-premises versions aren't patched.

Christopher Wray tells the US Senate that more US infrastructure will be targeted for cyberattacks in the wake of the Gaza conflict.

The solution? Follow in the footsteps of companies that have raised the cost of exploitation.

Ransomware is evolving. Bad actors are using various methods to increase profits by analyzing and leveraging the victims data and not bothering to encrypt.

Today, CISA updated its guidance addressing two vulnerabilities, CVE-2023-20198 and CVE-2023-20273, affecting Cisco’s Internetworking Operating System (IOS) XE Software Web User Interface (UI). The guidance now notes that Cisco has fixed these...

Did you ever seen ZPAQ archives? This morning, my honeypot captured a phishing attempt which lured the potential victim to open a "ZPAQ" archive. This is not a common file format. This could be used by the attacker to bypass classic security...

If security teams prioritize less, they can achieve more and remove the bottlenecks to effective project management.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Episode 1 of Bugcrowd’’s docuseries, Unsolved Cyber Mysteries, describes signal hacking attacks in the 1980s and the potential motivations behind them.