Security Bulletin

Changes at CISA and promises of more public-private partnerships and deregulation are just a few ways the incoming administration could upend the feds' role in cybersecurity.

The security extensions for the Domain Name System aimed to make the Internet more reliable, but instead the technology has exchanged one set of problems for another.

Here’s five cyber events that shaped 2024 – and implications for the year ahead.

A few days ago, I wrote a diary[ 1] about a link file that abused the ssh.exe tool present in modern versions of Microsoft Windows. At the end, I mentioned that I will hunt for more SSH-related files/scripts. Guess what? I already found another one....

Attack by Black Basta sent the Ascension system reeling for several days, forcing medical staffs to reading paper charts.

Cybernews reports that Paris-based software firm Kaspr — which provides a paid Chrome browser extension allowing the gathering of LinkedIn users' professional contact information — has been ordered by France's National Commission on Informatics and...

Alleged NetWalker ransomware affiliate Daniel Christian Hulea has been subjected to a two-decade prison sentence for leveraging the ransomware to extort $21.5 million worth of Bitcoin alongside a co-conspirator, SecurityWeek reports

The number of Non-Human Identities (NHIs) in many organizations has exploded. Key trends, drivers, and market landscape in this fast-developing area are explored.

Hotfixes have been revealed for three vulnerabilities affecting Sophos Firewall versions 21.0 GA and older, two of which were of critical severity, reports The Hacker News.

SecurityWeek reports that Rockwell Automation has issued fixes for a trio of critical flaws impacting Allen-Bradley PowerMonitor 1000 instances, which could be leveraged to infiltrate and disrupt industrial systems.

Major U.S. healthcare system Ascension Health had data from more than 5.599 million patients and employees compromised in a cyberattack earlier this year, which was attributed to the Black Basta ransomware-as-a-service operation, Cybernews reports