Security Bulletin

On International Day of Education, Cisco is proud to spotlight its non-profit partnerships with Code.org, Darsel, Raspberry Pi Foundation, and Science Buddies, in honor of the incredible work these organizations are doing to advance education...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

In the second of our new technical thought leadership series, Sophos X-Ops takes a detailed look at anti-ransomware techniques

Twenty-six billion records amounting to 12TB of data, a significant amount of which was compiled from prior data breaches, have been exposed as part of a colossal leak, which has been regarded as the Mother of all Breaches, according to Cybernews.

North Korean state-sponsored threat actor ScarCruft, also known as APT37, Ruby Sleet, Ricochet Chollima, InkySquid, and RedEyes, has targeted media outfits and individuals knowledgeable in North Korean affairs in a new attack campaign deploying the...

Numerous Android and Java apps leveraging abandoned open-source libraries, including all technologies based on Apache Maven, could be compromised through the novel MavenGate software supply chain attack technique, reports The Hacker News.

Cryptowallet-targeting macOS backdoor spread via cracked software BleepingComputer reports that threat actors have leveraged cracked macOS software to facilitate the distribution of information-stealing malware targeting cryptocurrency wallets on...

Significant enhancements to bolster stealth have been added to the latest variant of the Chaes malware identified as "Chae$ 4.1," Hackread reports.

Major Irish global aircraft leasing firm AerCap has been impacted by a ransomware attack on Jan. 17, which the newly emergent Slug ransomware gang has since claimed, reports The Register.

U.S. multinational fast food chain Subway had its internal system claimed to be compromised by the LockBit ransomware operation, resulting in the theft of a trove of sensitive financial information, The Register reports.

Hackread reports that hardware cryptocurrency wallet Trezor had almost 66,000 users' contact information possibly exfiltrated following a breach of its third-party support portal.