Security Bulletin

In an era of technological progression in financial services, Cisco's Catalyst Center stands at the forefront of innovation, particularly in automation use cases. It allows financial institutions to automate various tasks, thereby enhancing...

Nearly 50% of 14 U.S. states that passed consumer data privacy laws have failed to properly protect their residents' data from improper usage by private firms, StateScoop reports.

Here are the five root causes of cloud breaches and five ways to mitigate them.

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability These types of vulnerabilities are frequent attack vectors...

CISA released two Industrial Control Systems (ICS) advisories on February 6, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-037-01 HID Global Encoders ICSA-24...

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable locally Vendor: HID Global Equipment: iCLASS SE, OMNIKEY Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker...

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Low attack complexity Vendor: HID Global Equipment: Reader Configuration Cards Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

TechCrunch reports that mobile consumer-grade stalkerware apps Highster and PhoneSpector have seemingly ended operations following a settlement between Patrick Hinchy, whose tech firm consortium was behind both apps, and the New York Attorney General...

Organizations have struggled to make zero trust a reality. Could AI make the difference?

This report documents the rise of commercial surveillance vendors and the industry that threatens free speech, the free press and the open internet.

Private spyware vendors were behind nearly half of all zero-day exploits in Google products since 2014.