Security Bulletin

Going back a year or so, I wrote a story on the passive recon, specifically the IPINFO API ( https://isc.sans.edu/diary/28596).  This API returns various information on an IP address: the registered owning organization and ASN...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

AI safety platform startup WitnessAI claims to help enterprises use AI safely and effectively with its platform addressing AI privacy, governance, and security.

As a newly independent company, SAGE Cyber will offer a platform that helps CISOs make data-driven decisions and optimize their security defenses.

Critics say the new Copilot+ PCs’ “photographic memory” could be exploited by threat actors.

Scarred Manticore is the smart, sophisticated one. But when Iran needs something destroyed, it hands the keys over to Void Manticore.

Personalized phishing emails with fake collaboration opportunities and compromised video descriptions linking to malware are just some of the new tricks.

The latest rapid developments in AI and GenAI are a new juncture in the IT and cybersecurity landscape.

Security pros warn that a bug in the popular open-source logging and metrics tool could cause denial-of-service attacks and data loss in all the major cloud platforms, including AWS, GCP and Azure.

The agency plans to get more serious about enforcement as Iran and Russia step up the volume of cyberattacks on water systems nationwide.

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Graph and streaming databases are helping defenders deal with complex, real-time threat and cybersecurity data to find weak points before attackers.