Security Bulletin

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT...

Here are six ways security teams can detect and mitigate data leaks.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

[This is a Guest Diary by Michael Smith, an ISC intern as part of the SANS.edu BACS program]

Russia's APT29 is going after a critical RCE flaw in the JetBrains TeamCity software developer platform, prompting governments worldwide to issue an urgent warning to patch.

In a bid to avert another breach similar to the hack of several U.S. government email accounts by Chinese advanced persistent threat operation Storm-0558 using a compromised Microsoft signing key, the Cybersecurity and Infrastructure Security Agency...

More than 92% of internet-exposed instances of the pfSense open-source firewall and router software could be compromised to achieve remote code execution by chaining the reflective XSS vulnerabilities, tracked as CVE-2023-42325 and CVE-2023-42327, as...

Sony-owned video game developer Insomniac Games had its systems claimed to be hacked by the Rhysida ransomware gang, reports Cyber Daily.

CBS News reports that New York-based health providers HealthAlliance Hospital, Margaretville Hospital, and Mountainside Residential Care Center, which are under the Westchester Medical Center Health Network, had their patients' data compromised in an...

Bankrupt Bitcoin ATM firm Coin Cloud had its systems claimed to be hacked by unknown threat actors last month but questions remain about the true nature of the intrusion, according to TechCrunch.

Ukraine takes credit for Russian tax authority hack Russia's Federal Taxation Service, or FNS, had its central and regional servers infiltrated in a cyberattack admitted to be conducted by Ukraine's Defense Intelligence service, BleepingComputer...

Significant internet and network disruptions have been experienced across Ukraine following a major cyberattack against the country's largest telecommunications firm Kyivstar, according to The Record, a news site by cybersecurity firm Record Future.