Security Bulletin

Ongoing intrusions exploiting a pair of old remote code execution flaws in the widely used open-source web app framework ThinkPHP, tracked as CVE-2018-20062 and CVE-2019-9082, have been conducted by Chinese hackers since April, following a similar...

Attacks leveraging breached VPN credentials have been deployed by the new Fog ransomware operation against organizations in the U.S. education sector since early last month, BleepingComputer reports.

Establishing a clear process for developers to respond to critical CVEs is essential for having a rapid and coordinated response.

One of the challenges with many IoT devices, in particular those targeting consumers and small businesses, is the ability to find how long a device is supported. This "expiration date" is becoming important as vulnerabilities are often discovered...

Read how Cisco Security Cloud Control prioritizes consolidation of tools and simplification of security policy without compromising your defense.

Each insider threat incident averages a $15 million loss, so teams really need to rethink their plans to mitigate these threats.

A 2024. 23. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2024.05.31. és 2024.06.06. között kezelt incidensek statisztikai adatait is tartalmazza.

Overview ISC provides binary packages and corresponding source code for Kea DHCP hosted on Cloudsmith. Packages and source code tarballs are provided for every release. Thank you to Cloudsmith! The repository for Kea open source packages is provided...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The FBI’s assistant cyber director outlined its efforts to disrupt threat actors as its victim support strategies evolve.

Researchers with Google say they uncovered and shut down a number of government disinformation campaigns.