For providers

The 2024 ISC2 Cybersecurity Workforce Study found that amid a tightening job market and dynamic cyber-threat environment, ongoing staffing and skills shortages are putting organizations at serious risk. Can AI move the needle in defenders' favor?

Following Cybersecurity Awareness Month aims, we want to share information about open-source projects that can help enhance the security of your apps and organization and improve LLM security. Nuclei… Read more on Cisco Blogs

In a twist, more than 1 terabyte of data was stored in the S3 bucket of a previous victim.

Chinese APTs lurked in Canadian government networks for five years — and that's just one among a whole host of threats from Chinese bad actors.

The prominent state-sponsored advanced persistent threat (APT), aka Jumpy Pisces, appears to be moving away from its primary cyber-espionage motives and toward wreaking widespread disruption and damage.

President Joe Biden's approval of the Technology Modernization Fund three years ago was noted by Federal Chief Information Officer Clare Martorana to have significantly bolstered the U.S.'s cybersecurity posture.

Accelerating zero trust and bolstering operational visibility have been noted by interim Federal Chief Information Security Officer Mike Duffy to be among the U.S.'s leading cybersecurity policy priorities for the following year.

Malicious actors could have compromised the Opera browser's private APIs through a malicious extension on the Chrome Web Store exploiting a recently addressed vulnerability as part of the CrossBarking attack.

QNAP's patches for the SQLi issue come just days after it addressed another zero-day impacting its HBS 3 Hybrid Backup Sync disaster recovery and data backup solution, which was discovered and leveraged by the Viettel Cyber Security team to compromise a TS-464 network-attached storage device during the competition.

Major Peruvian financial services firm Interbank, formerly known as the International Bank of Peru, has disclosed having been impacted by a cyberattack that resulted in the compromise of certain clients' information after stolen data was exposed by the threat actor "kzoldyck" on various dark web forums.