Security Bulletin

The rules necessary to secure US communications have already been in place for 30 years, argues Sen. Wyden, the FCC just hasn't enforced them. It's unclear if they will help.

The untapped risks of non-human identities and the growing security challenge they represent to business.

Updates have been issued by Splunk to address over 15 vulnerabilities impacting its products and third-party dependencies, the most serious of which is the high-severity deserialization of untrusted data bug in Secure Gateway, tracked as CVE-2024...

"Based on available data, critical power supply systems have not been affected and are operational, and the investigation is currently ongoing. In the event of a ransomware infection, the Directorate strongly recommends that no one pay the ransom...

Internal and external cybersecurity experts have immediately acted to investigate and address the incident upon its discovery, said Krispy Kreme in a filing with the Securities and Exchange Commission.

Aside from exploiting a domain generation algorithm and conducting environment checks to prevent execution on other systems, the newly discovered Zloader variant has also been spread through the GhostSocks payload as part of an updated attack chain...

Intrusions involved the exploitation of trusted domains, such as Adobe.com and Google AMP, to evade detection, according to a report from Group-IB.

Cisco Nexus 9000 Series Switches use dynamic load balancing (DLB) to improve network performance. Learn how DLB works, discover new standards developed with the Ultra Ethernet Consortium, and more.

Security isn't just about tools — it's about understanding how the enemy thinks and why they make certain choices.

Discover how the BEAD initiative is reshaping internet access across the nation, empowering communities with high-speed connectivity and digital equity—learn more about this transformative effort and its potential impact.

Secure Workload platform has taken a significant leap forward with the launch of its 3.10 release earlier this month packed with Gen AI and many more.

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, see Siemens' ProductCERT...