Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

A few months ago, RocketMQ[1], a real-time message queue platform, suffered of a nasty vulnerability referred as %%cve:2023-33246%%. I found another malicious script in the wild a few weeks ago that exploits this vulnerability. It has still today a...

If you are in the market for a smartphone but want to break away from the Apple-Google duopoly, look no further: these alternative smartphones are based on various Linux variants and custom hardware.

Rev Up to Recert offers tech learners free limited-time access to learn and earn Continuing Education credits toward recertifying active Cisco certifications. This holiday season, Rev Up to Recert is all about SD-WAN.

Nearly 30 healthcare organizations, including CVS Health, Duke Health, Geisinger, Tufts Medicine, and UC San Diego Health, have expressed support for the Biden administration's executive order on artificial intelligence that sought stronger AI...

The Federal Communications Commission has introduced updated data breach rules for telecommunications firms that expand the definition of breach to unintended customer data access, use, or disclosure, according to The Record, a news site by...

SiliconAngle reports that cyberattacks involving 29 malware families have compromised 1,800 financial apps around the world during the past 12 months, indicating mounting mobile banking heists.

Idaho National Laboratory had data from 45,047 former and current employees, spouses, and dependents compromised following a cyberattack last month, which has been claimed by the SiegedSec hacking operation, reports The Record, a news site by...

More than 948,000 records from major nonprofit management software provider DonorView have been exposed online as a result of an insecure database, according to TechRadar.

U.S. multinational food and beverage company Kraft Heinz has launched an investigation into the Snatch ransomware gang's recently emerged claims of an August attack even though there has been no indication of any systems compromise, BleepingComputer...