Security Bulletin

CISA released eight Industrial Control Systems (ICS) advisories on December 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-354-01 Hitachi Energy RTU500...

[This is a Guest Diary by Sahil Shaikh, an ISC intern as part of the SANS.edu BACS program]

The number of DDoS-related incidents targeting APIs have jumped by 30x compared with traditional Web assets, suggesting that attackers see the growing API landscape as the more attractive target.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

A 32-year-old was sentenced on criminal hacking charges related to a data-stealing malware operation.

The agency asks the cybersecurity community to adopt "romance baiting" in place of dehumanizing language.

The best service provider minimizes your costs and instead focuses on building a long-term partner relationship with your organization.

The threat intelligence business, which is set to be acquired by Mastercard for billions, is officially vendor non grata in Putin's regime.

Over 8.7 million records, many of which are duplicates, were discovered within the server, including user phone numbers, network information, device identifiers, performance metrics, and other personal details, according to Cybernews researchers.

Account tokens obtained through the exploitation of a trio of vulnerabilities within Facebook's "View As" feature have enabled the widespread hijacking of Facebook user accounts, according to the Irish data watchdog.

Aside from leading to the deferral of patient care and prescription processing, such an attack against Change Healthcare has also led to the proliferation of malicious actors purporting to be hospital representatives to obtain credit card numbers, as...

Unauthorized systems access has prompted the exfiltration of names and other personal data, said Regional Care in a filing with the Office of the Maine Attorney General that noted the breach's discovery almost a week after the intrusion commenced.