Security Bulletin

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability CVE-2024-3273 D-Link Multiple NAS...

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see  Siemens' ProductCERT...

Today, CISA publicly issued Emergency Directive (ED) 24-02 to address the recent campaign by Russian state-sponsored cyber actor Midnight Blizzard to exfiltrate email correspondence of Federal Civilian Executive Branch (FCEB) agencies through a...

While the industry comments on and debates CISA’s new incident reporting rules, here are seven proactive steps CISOs can take to prepare.

We live in a dynamic age, especially with the increasing awareness and popularity of Artificial Intelligence (AI) systems being explored by users and organizations alike. I was recently quizzed by a junior researcher on how AI systems came about and...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The vulnerability is due to a “dangerous nodejs configuration” and has a CVSS score of 9.4.

The HP Threat Research team says security pros should take note because Raspberry Robin has been used to deliver multiple families of malware – and as a precursor to ransomware.

Major artificial intelligence cybersecurity firm Darktrace has been looking to advance proactive cybersecurity resilience with its new ActiveAI Security Platform, which integrates new services with existing security offerings to provide improved...

FedScoop reports that Google has been granted federal authorizations to allow intelligence and defense data hosting through its air-gapped Google Distributed Cloud Hosted platform.

Both the U.S. Cyber Command and the newly established Assistant Secretary of Defense for Cyber Policy office were noted by Cyber Command and National Security Agency head Gen. Timothy Haugh to be closely collaborating to advance the Defense...