For providers

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The high-severity CVE-2024-5806 allows cyberattackers to authenticate to the file-transfer platform as any valid user, with accompanying privileges.

As threats become more sophisticated and regulatory demands become stricter, the new Cisco Secure Cloud Access (SCAZT) Specialist Certification dives into the heart of cloud security, underscoring the importance of a security-first approach.

The Department of Defense is facing criticism over its handling of background check data.

More than 200 regional and national government agencies have been impacted by the ransomware attack, and few of them are once again operational.

An unknown adversary compromised a CISA app containing the data via a vulnerability in the Ivanti Connect Secure appliance this January.

Security pros say teams need to monitor for changes in the threat landscape and gain visibility to this evolving malware trend via frequent audits and purple team exercises.

Injected malicious JavaScript code gives attackers administrator rights on websites, and fills sites with SEO spam.