Security Bulletin

The security startup provides managed detection and response services for small to midsize businesses to detect and address modern threats, such as ransomware, phishing attacks, and malicious insiders.

An impostor who posed as the secretary of state in text and voice communications with diplomats and politicians demonstrates the increased sophistication of and national security threat posed by the AI technology.

There are several reasons why one would set up an internal certificate authority. Some are configured to support strong authentication schemes, some for additional flexibility and convenience. I am going to cover the second part. In particular, it...

To help counter crime, today's organizations require a cyber-defense strategy that incorporates the mindset of the cybercriminal.

Though the victims list on its site has since been taken down, the group plans on leaking the rest of the files stolen from its victims.

From data fog to threat clarity: Automating security analytics helps security teams stop fighting phantoms and respond to what matters.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Following a breach at the country's top mobile provider that exposed 27 million records, the South Korean government imposed a small monetary penalty but stiff regulatory requirements.

Startup Tumeryk's State of AI Trust finds Google Gemini Pro 2.5 as the most trustworthy, with OpenAI's GPT-4o mini a close second and DeepSeek and Alibaba Qwen scoring lowest.

The reliability of North America's grid relies on strong cybersecurity. See how Cisco's Industrial Threat Defense can help utilities meet NERC CIP requirements, including the new INSM.

Some 17 of the bugs are at high risk for exploits, including multiple remote code execution bugs in Office and SharePoint.

Data exfiltration was the most common malware in Sonatype report, with more than 4,400 packages designed to steal secrets, personally identifiable information, credentials, and API tokens.