Security Bulletin

Deepfakes and other forms of generative AI may be the catalysts to force a restructuring of the entire U.S. identity system.

The China-linked cyber-operations group, better known as Lotus Panda, uses its own custom malware to focus on government agencies and private companies in Hong Kong, the Philippines, Taiwan, and Vietnam.

Voice firewalls, call authentication and real-time fraud detection offer robust vishing prevention.

The chat infrastructure and data-leak site of the notorious ransomware-as-a-service group has been inactive since March 31, according to security vendors.

Jen Easterly, former director of CISA, discussed the first 100 days of the second Trump administration and criticized the president's "mandate for loyalty" during a panel at RSAC 2025.

Security Scorecard's Dr. Aleksandr Yampolskiy discusses securing what you don't own with supply chain detection and response.

Fortra's Rohit Dhamankar discusses Cobalt Strike abuse decreases by 80% with Fortra, Microsoft, Health-ISAC initiative.

Okta's Charlotte Wylie discusses securing non-human identities at scale in the era of AI agents.

While nation-state actors are demonstrating how easily they can infiltrate US networks, government officials don't seem to have a clear vision for what comes next.

Cyware's Jawahar Sivasankaran discusses the role of cyber threat intelligence in maturing security operations.

A SLAAC-spoofing, adversary-in-the-middle campaign is hiding the WizardNet backdoor malware inside updates for legitimate software and popular applications.

Outage shows how fast things change in the cyber underground.