Security Bulletin

Apple today released iOS 17.4 as well as iOS 16.7.6 (and the respective iPadOS versions). These updates fix a total of four vulnerabilities. Two of the vulnerabilities are already being exploited. CVE-2024-23225 is a privilege escalation issue and...

TeamCity servers risk being exposed to “complete compromise” if patch isn’t installed, researchers warned.

See how developers can utilize the Investigate API to enhance the data in their Security Information and Event Management (SIEM) systems, threat intelligence platforms, or incident management workflows.

The last few years have been great for attackers exploiting basic web application vulnerabilities. Usually, home and small business products from companies like Linksys, D-Link, and Ubiquity are known to be favorite targets. But over the last couple...

Kubernetes Security Operations Center announced the rollout of a zero-trust policy generator designed to simplify the task of managing role-based access controls for Kubernetes clusters.

The cyber resilience offering will include strategies for recovering from adverse incidents including cyberattacks such as ransomware.

Votiro Cybersec has launched a new unified platform for data detection and response that can extend its protection to include data in files that are in transit across an organization.

When a stub zone is configured in named it seems to not work (and the resolver that has the stub zone responds SERVFAIL to client queries for names in that zone) if the target servers in the primaries server list are configured with minimal-responses...

Cloudflare announced that users of its Application Security Advanced offering will receive an improved web application firewall designed to defend applications that run large language models.

The Department of the Interior’s Office of the Inspector General revealed that the department’s cloud environment was successfully breached using a tool that is available online.

Stop lateral movement in its track with zero trust access.