Security Bulletin

The small island nation's new data protection and governance policy reflects a forward-thinking cybersecurity strategy.

"Unfurling Hemlock" has deployed malware on tens of thousands of systems worldwide by nesting multiple malicious files inside other malicious files.

If security researchers can execute a guest-to-host attack using a zero-day vulnerability in the KVM open source hypervisor, Google will make it worth their while.

Officials in Australia are warning travelers following the discovery of rogue Wi-Fi points in one of the nation’s airports.

The high-severity CVE-2024-6387 in OpenSSH is a reintroduction of a 2006 flaw, and it allows unauthenticated RCE as root.

Security pros say this incident underscores the need for thorough regression testing.

The company seemingly underestimated the severity of the breach after originally providing a head count of roughly 36,000 impacted individuals.

Although not yet exploited in the wild, the max-critical authentication bypass bug could allow adversaries to take over unpatched Juniper Session Smart Routers and Conductors, and WAN Assurance Routers, the company warns.

Qualys published a blog posts with details regarding a critical remote code execution vulnerability [1]

Critical dependency manager supply chain vulnerabilities have exposed millions and millions of devices to arbitrary malware for the better part of decade.