Security Bulletin

RATs or “Remote Access Tools” are very popular these days. From an attacker&#x27s point of view, it&#x27s a great way to search and exfiltrate interesting data but also to pivot internally in the network. Besides malicious RATs, they are legit...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The group behind the 2023 MOVEit attacks says it is deleting previous victims’ data to focus on its Cleo campaign.

Cellebrite is one of a number of developers that develop mobile device exploit and surveillance tools marketed as "forensics" software for law enforcement agencies investigating crimes.

Join us for 12 days of skill-building that could transform your 2025.

Arctic Wolf plans to integrate Cylance's endpoint detection and response (EDR) technology into its extended detection and response (XDR) platform.

Cybercriminals exploit legacy tools, cloud complexities, and automated platforms to weaponize identity management systems, transforming trust into the ultimate vulnerability.

Artificial intelligence capabilities are coming to a desktop near you — with Microsoft 365 Copilot, Google Gemini with Project Jarvis, and Apple Intelligence all arriving (or having arrived). But what are the risks?

While low-code/no-code tools can speed up application development, sometimes it's worth taking a slower approach for a safer product.

Supply chain attack targeted pentesters and security researchers, as well as threat groups.

The sector must prioritize comprehensive data protection strategies to safeguard PII in an aggressive threat environment.

Such a new agreement, which does not cover critical and emerging tech development, "advances U.S. interests through newly established and strengthened provisions on transparency and data reciprocity," said the State Department.