Security Bulletin

Fine-tuning is a process that lets us steer a general-purpose large language model toward a specific task by training it on targeted examples. In cybersecurity, this is often useful for problems like classifying phishing emails, suspicious URLs....

Nation-state attackers breach water systems through weak passwords, exposed PLCs, and poor segmentation — not sophisticated malware.

A recent ISACA poll reveals that while 90% of organizations believe employees are using AI, only 22% have seen returns meet or exceed expectations.

The attack, which occurred on September 11, 2021, targeted the Texas Republican Party's website, hosted by Epik.

Go beyond CISA BOD 26-02 compliance. Discover how Cisco’s U.S. Public Sector portfolio helps agencies transform modernized networks into powerful security sensors for zero trust and continuous modernization.

The breach occurred when threat actors exploited a vulnerability in third-party software used by KDDI.

AI agents are moving from demos into production fast — and every LLM call and external tool they invoke is a new attack surface. This post introduces Agent Runtime Protection in the Cisco AI Defense Python SDK: a one-line integration that brings....

Attackers are employing sophisticated tactics, hiding malicious code behind convincing government branding and legal references to trick victims into downloading a ZIP archive, according to CYFIRMA.

A Department of Homeland Security inspector general report revealed that Secret Service agents routinely used personal cell phones for mission-critical communications, both domestically and internationally, often because government-issued devices...

Founded in 2023, Nebulock's AI-driven platform performs autonomous, vendor-agnostic threat hunts across endpoint, identity, cloud, network, and SaaS telemetry.

The campaign, dubbed "Poisoned Tenant" and discovered by Push Security, involves attackers creating fake OpenAI organizations using Gmail addresses but sending invitations from OpenAI's legitimate notification system.

The campaign, which Microsoft has not attributed to a known threat actor, uses lures referencing common hotel operational issues like guest complaints, bedbug infestations, and health inspections.