Security Bulletin

A fake GitHub download page hosts the malicious ClickFix command.

How proactive prioritization will save time and effort when your team faces a wave of AI-discovered vulnerabilities.

While the breach was initially believed to affect only recent orders, new information suggests older orders may also be compromised.

Starting with the 2028 Wiretap Report, which will be published in 2029, the judiciary will include data on network investigating techniques.

The initiative mandates the creation of an AI cybersecurity officer role within every state agency and establishes an AI cyber defense program housed in the state’s Cybersecurity Integration Center.

These "dropcatch" domains are attractive to threat actors because they retain trust, backlinks, and web traffic from their previous legitimate use, making them appear more favorable to security systems than new registrations.

The vulnerability, identified as CVE-2026-65400, has a severity rating of 7.1 out of 10 and stems from a flaw in macOS' screen sharing capability.

ExfilSquad, which emerged on July 26, initially claimed to have exfiltrated data from 15 organizations.

The incident, which occurred in July, was disclosed by RingCentral as the result of a sophisticated social engineering campaign.

In this video interview, Standard Chartered's group CISO shares insights on transitioning from technical roles to strategic leadership, the importance of business-savvy security executives, and how AI is reshaping both defensive capabilities and...

Driven by AI-augmented research and scanning, vulnerability volumes continue to surge, driving the National Institute of Standards and Technology to ask whether AI could be the answer.