Security Bulletin

The Coalition for Secure AI (CoSAI) has expanded its roster of members with the addition of threat intelligence management, collaboration, and response orchestration vendor Cyware.

What happened to KnowBe4 also has happened to many other organizations, and it's still a risk for companies of all sizes due to a sophisticated network of government-sponsored fake employees.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Hackers sent a convincing lure document, but after 20 years of similar attacks, the target organization was well prepared.

Since posting a diary about Vega-Lite [ 1], I have "played" with other queries that might be interesting and the first one that I wanted to explore since the DShield SIEM [ 2] capture and parse the iptables logs and store the Time-to-Live (TTL) for...

As the U.S. presidential elections near, foreign hackers are launching new campaigns against the candidates and their staffers.

Session hijacking is an emerging entry point for ransomware actors but few orgs invalidate open sessions after a malware infection.

By accessing the MSSQL, threat actors gain admin-level access to the application, allowing them to automate their attacks.

Thought to be Brazilian in origin, the remote access Trojan is the "perfect tool for a 21st-century James Bond."

Criminal actors are finding their niche in utilizing QR phishing codes, otherwise known as "quishing," to victimize unsuspecting tourists in Europe and beyond.

The 12-member group will compete at the first all-women's capture-the-flag competition this November at the Kunoichi Cyber Games in Tokyo.

Security pros say TeamTNT’s resurgence shows that attackers will always find new ways to attack the cloud.