Security Bulletin

Lurie Children's Hospital has been demanded by the Rhysida ransomware-as-a-service operation to provide more than $3.4 million worth of bitcoin.

Cencora, formerly AmerisourceBergen, had its IT systems compromised following a cyberattack.

The Atomic Stealer malware packs a punch delivering information-stealing malware, cryptomining payloads, and keylogger capabilities.

Attacks distributing the novel Xeno RAT trojan and updated Gh0st RAT variant dubbed "Nood RAT" have been underway.

Today, CISA released a Resource Guide for Cybersecurity Clinics to outline ways CISA can partner with and support cybersecurity clinics and their clients. University cybersecurity clinics train students from diverse backgrounds and academic expertise...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

UNC1549, aka Smoke Sandstorm and Tortoiseshell, appears to be the culprit behind a cyberattack campaign customized for each targeted organization.

CSF 2.0 features a larger scope, new “Govern” pillar and catalog of resources to aid implementation.

In the notice letter sent out to affected individuals, U-Haul notes that credit card information was not accessed in the breach.

CISA and its counterparts in the UK and other countries this week offered new guidance on how to deal with the threat actor's recent shift to cloud attacks.

Apple's PQ3 for securing iMessage and Signal's PQXH show how organizations are preparing for a future in which encryption protocols must be exponentially harder to crack.