Security Bulletin

A new attack method unveiled at Black Hat abuses Windows Update to roll back Windows 11 to known exploitable versions.

This blog explores the paradigm shift brought about by AIOps, which combines the power of AI and automation to streamline IT operations, enhance decision-making, and drive proactive problem resolution.

The recent outage highlights the critical importance of adhering to established processes and governance frameworks.

US citizens play middleman between US companies and the North Korean government agents they unwittingly hire.

Such a policy, which is expected to be issued by year-end, seeks to address concerns surrounding actuaries, said National Cyber Director Harry Coker Jr. at this year's Black Hat USA conference.

Google's Quick Share peer-to-peer file-sharing tool has been impacted by 10 now-addressed security vulnerabilities, which could have been leveraged to facilitate unauthorized wireless file writing and remote code execution in Windows systems.

Malvertising exploiting Google search results has been leveraged to lure victims into downloading fraudulent software installers, including YouTube downloader, Roblox FPS Unlocker, and VLC video player.

More than 6,000 IPs with Cisco SMI were observed by the Shadowserver Foundation to have been exposed to the internet, with CISA noting that exploitation has been made easier by the prevalence of weak passwords in such devices.

Infiltration of CSC ServiceWorks' systems resulted in the exfiltration of individuals' names, birthdates, Social Security numbers, driver's license numbers, contact details, bank account numbers, and health insurance details.

Intrusions commenced with the delivery of phishing emails with RAR archives deploying a backdoor that facilitated the injection of the APT31-linked GrewApacha trojan, as well as a new version of the CloudSorcerer malware that bypasses detection...

"Buckle up for October, because I think we're in for a wild ride," said former National Security Agency Director of Cybersecurity Rob Joyce at this year's DEF CON cybersecurity conference, where he noted that election interference had been conducted...