Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Arbitrary file upload is made possible by a missing file type validation.

A cyber-espionage campaign is targeting Ukrainian government entities with a series of sophisticated spear-phishing attacks that exploit XSS vulnerabilities.

Incident underscores impact of third-party breaches on health organizations, security experts say.

The addition is an important hire for the No. 2 position at the cyber agency. The main director role remains unfilled post-Easterly, with Bridget Bean taking over acting duties for now.

The online service has since been shut down as the agency grapples with the cyberattack, though it assures the public that those most in need of legal assistance will still be able to access help.

The 8th Annual Cisco Partner Innovation Challenge is here! With nearly $1M in prizes, we're empowering partners to innovate, spark breakthroughs, and build what's next. Submissions close September 5, 2025.

I am excited to welcome Chuck Graham as Cisco’s Chief Supply Chain Officer. Chuck will oversee end-to-end supply chain operations, driving agility, innovation, and resilience across our global n… Read more on Cisco Blogs

If the Common Vulnerabilities and Exposures system continues to face uncertainty, the repercussions will build slowly, and eventually the cracks will become harder to contain.

If the Common Vulnerabilities and Exposures system continues to face uncertainty, the repercussions will build slowly, and eventually the cracks will become harder to contain.

Researchers have developed advanced detection methods to uncover abuse of Azure Managed Identities, shedding light on a growing security concern in cloud environments, reports Cyber Security News.

GBHackers News reports that the healthcare sector is experiencing a surge in cyberattacks, with 92% of organizations reporting breaches that exposed more than 276 million patient records, an average of 758,000 compromised daily.