Security Bulletin

Significant supply chain compromise could be conducted against major IT and cryptocurrency organizations through a novel continuous integration/continuous delivery attack technique exploiting thousands of public GitHub repositories with malicious...

As the investigation continues, the zoo reports that it does not store the credit card information of its guests.

Microsoft's database continues to attract cybercriminal attention; the nature of this wave's threat group is unknown, with the attacks having been exposed only after a happenstance OpSec lag.

Our honeypots saw a number of scans for "/j_acegi_security_check" the last two days. This URL has not been hit much lately, but was hit pretty hard last March. The URL is associated with Jenkins, and can be used to brute force passwords.

Learn how the University of the Bundeswehr Munich used Cisco technology to develop a digital twin model for bridges that predicts maintenance windows based on telemetry, reducing costs and optimizing the design of new bridges with real data rather...

Some of the most dangerous vulnerabilities of 2023 make it to CISA's KEV list, including bugs in Apple and Apache products.

The country's election commission pointed the blame at traffic coming from Ukraine and Germany.

Videos promoting how to crack popular software circumvent Web filters by using GitHub and MediaFire to propagate the malware.

A shift of focus to cyberattack prevention strategies will more effectively mitigate risk.