Security Bulletin

With the presidential election this year and increase in cyberattacks and conflict around the world, MITRE has outlined four important areas the incoming presidential administration should focus on next year.

It's amazing to see how attackers reuse and combine known techniques to target their victims with new campaigns! Last week, I spotted some malicious MSIX packages on VT that drop a NetSupport[ 1] client preconfigured to phone home to an...

Summary On May 9, 2024, Microsoft successfully addressed multiple vulnerabilities within the Azure Machine Learning (AML) service, which were initially discovered by security research firms Wiz and Tenable. These vulnerabilities, which included...

The Arid Viper APT group is deploying AridSpy malware with Trojanized messaging applications and second-stage data exfiltration.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

I wrote a couple of diary entries showing my tools that produce and consume JSON data. Like " Analyzing PDF Streams", " Another PDF Streams Example: Extracting JPEGs" and " Analyzing MSG Files".

Truist Bank confirmed it suffered a breach of its network and exposure of some customer data.

A model can be perfectly innocent, yet still dangerous if the means by which it's packed and unpacked are tainted.

The company focused heavily on data and system security in the announcement of its generative AI platform, Apple Intelligence, but experts worry that companies will have little visibility into data security.

Though the company is informing affected individuals of a breach, it's keeping the nature and scope of the cybersecurity incident that led to it under wraps.

May ransomware attack caused by an employee who mistakenly downloaded a malicious file.

Security analysts say Big Tech companies experiencing slow growth will acquire innovative cybersecurity startups to fuel growth in 2024 and beyond.