Security Bulletin

Significant improvements have been implemented in the new variant of the AcidRain wiper malware leveraged by Russia to compromise satellite internet provider Viasat.

Impacted business computers have already been isolated while other systems' cybersecurity defenses have already been enhanced amid an ongoing investigation into the means of malware compromise and the types of exfiltrated data.

Such a security issue within Mintlify's systems facilitated the exposure of its internal admin credentials, which could be leveraged to enable internal endpoint compromise and further data exposure.

More than 83,000 individuals had their sensitive data compromised following a December cyberattack against Nevada-based mortgage lender Nations Direct Mortgage.

Collaboration would not only enable the creation of a custom generative AI model for enterprise-focused large language model-powered apps, which could advance corporate threat hunting and supply chain attack detection, as well as enable proactive...

Here’s how we can balance security and development in the cloud.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

First patched in August, the critical vulnerability enables unauthenticated web shell deployment.

Artificial Intelligence (AI) comes with both useful applications and some very practical downsides, so it’s important to know how to frame the conversation with your CIO or CEO before your company invests in it.

Azorult infostealer aims to steal user credentials and credit card information via HTML smuggling.

Crucial enrichment data is not being added to NVD entries as NIST works through a “transition” process.

It’s official! Today, with the closing of the acquisition, Splunk became part of Cisco – and it couldn’t have come at a better time.