Security Bulletin

In all, the company released fixes for a whopping 139 CVEs in its own products and four for non-Microsoft products.

NATO countries are finding themselves at increased risk for cyberattacks from nations opposed to the international alliance.

Though the company reassures its users that customer funds were not accessed, the same cannot be said for customer information.

A joint advisory from top U.S. allies details how APT40 targets vulnerable end-of-life devices within hours or days of a PoC’s release.

Cybersecurity investments reached $3.3 billion during the second quarter of this year, which was 71% higher than the same period last year despite the number of transactions only increasing by one, SiliconAngle reports.

Microsoft today released patches for 142 vulnerabilities. Only four of the vulnerabilities are rated as "critical". There are two vulnerabilities that have already been discussed and two that have already been exploited.

The state-sponsored threat group is capable of exploiting fresh software vulnerabilities within hours of their initial discovery.

The ransomware-as-a-service platform just rolled off the assembly line, also targets Windows, and uses Golang for cross-platform capabilities.

Officials at South Africa's National Health Laboratory Service have announced plans to restore the operations of some services disrupted by a recent ransomware attack claimed by the BlackSuit ransomware gang by the middle of the month as the country...

The campaign, which distributes dozens of malicious jQuery variants across npm, GitHub, and jsDelivr, appears to be a manual effort, and lacks the typical pattern that characterizes similar, related attacks.