Security Bulletin

We do keep seeing attackers "poking around" looking for enabled development features. Developers often use these features and plugins to aid in debugging web applications. But if left behind, they may provide an attacker with inside to the...

Read Luxy Thuraisingam's Know Before You Go blog to learn more about Cisco Partner Summit 2024 in LA and online, October 28-30! Engage with keynotes, sessions, and activities. Register now and connect with #CiscoPS24!

Anton Dam wants to remove the drudgery, inefficiencies and time suck of audit and compliance management.

Cisco technology and partner managed services drive outcome-oriented solutions. Leverage networking, security, collaboration, and AI-ready platforms to enhance customer value and operational efficiency. Discover more at #CiscoPS24.

Unauthenticated threat actors can remotely cause a denial-of-service (DoS) cyberattack within the Remote Access VPN software in Cisco's ASA and Firepower software.

The latest GenAI jailbreak technique tricks chatbots into returning restricted content by blending different prompt topics together.

Until CEOs and boards prioritize learning more about mitigating threats, organizations are leaving themselves and their businesses open to the potential for disaster.

Autobell disclosed in a statement that its employees and customers may have had their full names, addresses, Social Security numbers, driver's license numbers, tax identification numbers, passport numbers, medical details, health insurance...

Organizations impacted by Mallox ransomware, also known as TargetCompany, Fargo, and Tohnichi, could leverage the decryption tool for files encrypted with the .mallox, .malloxx, .mallab, .malox, .ma1xo, .xollam, and .bitenc extensions between 2023...

Such a demand from Rhysida, which has an Oct. 30 deadline, comes a week after Easterseals disclosed in a filing with the Office of the Maine Attorney General that 14,855 individuals had their information, including their full names, addresses, Social...

Attacks leveraging the SharePoint bug, which could result in remote code execution, have prompted the bug's inclusion in the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog, with federal agencies urged to...

Impacted FortiGate devices had their configuration data, user information, and FortiOS256-hashed credentials exfiltrated as a result of the intrusions, a report from Google Cloud Mandiant showed.