Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

A judge approved a restraining order to prevent the researcher from downloading and disseminating the data.

This bill requires Web browsers to have an easy-to-find (and use) setting for consumers to send an opt-out preference signal by default to every site and app they interact with.

Microsoft warned that the DPRK's latest innovative tack chains together previously unknown browser issues, then adds a rootkit to the mix to gain deep system access and steal crypto.

Verkada acknowledges it spammed its own customers with junk email and allowed them to be exposed to unwanted emails.

The Ohio city filed for a restraining order, claiming the researcher was working in tandem with the ransomware attackers.

The malware, first discovered two years ago, has returned in campaigns using SEO poisoning.

Developers especially should pay attention to this VMware Fusion patch because if exploited, hackers could steal SSH keys and API credentials.

The energy kahuna said that operations were disrupted after an attack on its supporting business applications.

Attackers have added aggressive social engineering to their arsenal, along with a novel Windows-manipulating persistence mechanism that demands developer vigilance.

Malware authors have iterated on one of the premier encryptors on the market, building something even bigger and better.