Security Bulletin

CISO Partrick Opet warns us all to stay skeptical: but there’s no going back to the legacy days before the cloud and AI.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

There was a post initially published in January 2022 showing an exploitable "probable zero-day vulnerabilities"[ 1] for Sonicwall but looking back in what has been submitted in the past year to ISC, this past week was the first time we have been...

More than 2,500 test runs show the code analysis capabilities and limitations of popular models.

Cobalt's Gunter Ollmann unpacks the findings from the State of Pentesting Report 2025.

Semperis' Marty Momdjian discusses the launch of Ready1, an enterprise resilience platform.

Oligo Security's Gal Elbaz discusses Cloud Application Detection and Response.

LastPass' Karim Toubba discusses how they're reimagining access control.

ThreatLocker's Rob Allen discusses the growing overlap between endpoint and cloud environments.

Thousands of automatic tank gauge (ATG) devices are accessible over the Internet and are just "a packet away" from compromise, security researcher warns at 2025 RSAC Conference.

Making a case for empathy in cyber-leadership roles as a strategic business advantage.