Security Bulletin

The proposed settlement would amount to roughly $20 per Apple product that has Siri enabled, for each plaintiff.

The growing complexity of cyber threats, paired with limited resources, makes it essential for companies to adopt a more comprehensive approach that combines human vigilance with AI's capabilities.

Aside from conducting intelligence activities aimed at undermining Germany's military support to Ukraine, Dieter S. also committed to conduct arson attacks against industrial and military sites, as well as damage railways leveraged for military goods...

The Christmas Eve compromise of data-security firm Cyberhaven's Chrome extension spotlights the challenges in shoring up third-party software supply chains.

Investors were deceived by Do Kwon to purchase Terraform products and increase the value of Luna to $50 billion in early 2022 after he claimed to restore the dwindling value of the TerraUSD stablecoin only for the values of both coins to crash in May...

Such a rule, which is open for public comments until Mar. 4, would not only limit but also potentially prohibit the sales of Chinese-made drones, which account for most of the unmanned aerial vehicle market in the U.S.

Aside from deferring the delivery of breach notifications two months later, Visionworks also did not sufficiently defend its systems, resulting in the exfiltration of customers' names, birthdates, Social Security numbers, home and email addresses...

Power Platform's OData Web API Filter was impacted by two of the discovered security issues, the first of which stemmed from inadequate access control that enabled access to sensitive data and potential exploitation to obtain complete hashes while...

Most of the impacted services have since been restored but additional details regarding the identity of the intrusion's perpetrators have not been provided by the firm.

"This means that passwords used for mail access may be intercepted by a network sniffer. Additionally, service exposure may enable password guessing attacks against the server," said Shadowserver.

Officials revealed that the department's Office of Financial Research had also been infiltrated as part of the incident, which was noted to have stemmed from an attack against the agency's implementation of the BeyondTrust remote support software-as...