Security Bulletin

Here’s a strategy for combating the most common AI threats.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The nation amends its Cybersecurity Act, giving its primary cybersecurity agency more power to regulate critical infrastructure and third parties, and requiring cyber incidents be reported.

SANS Institute experts weigh in on the top threat vectors faced by enterprises and the public at large.

CVE-2024-30051, under active exploit, is the most concerning out of this month's Patch Tuesday offerings, and already being abused by several QakBot actors.

Emails from “Jenny Green” delivered LockBit Black through attached ZIP files.

While the protocol has made passwordless authentication a reality, token-binding is key to prevent against token theft and reuse, security vendor says.

Scattered Spider is as active as ever, despite authorities claiming that they're close to nailing its members.

Key management is more complex than ever. Your choices are: Rely on your cloud provider or manage keys locally; Encrypt only the most critical data; Or encrypt everything.

Webex powered our in-booth coffee bar experience at HIMSS 2024 with mobile ordering by Webex Connect. Discover how Webex Connect can power seamless end-to-end patient experiences with the tap of a finger.

Jeff Margolies on how Savyint is leveraging a variety of AI capabilities to enhance the user experience and improve identity security and compliance.

Security pros say the industry can expect to see this bug exploited soon, so patch, monitor and conduct other measures, like browser isolation and sandboxing.