Security Bulletin

The China-nexus cyber-threat actor has been operating since at least 2019 and has notched victims in multiple countries.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The high-severity CVE-2024-5806 allows cyberattackers to authenticate to the file-transfer platform as any valid user, with accompanying privileges.

As threats become more sophisticated and regulatory demands become stricter, the new Cisco Secure Cloud Access (SCAZT) Specialist Certification dives into the heart of cloud security, underscoring the importance of a security-first approach.

The Department of Defense is facing criticism over its handling of background check data.

More than 200 regional and national government agencies have been impacted by the ransomware attack, and few of them are once again operational.

An unknown adversary compromised a CISA app containing the data via a vulnerability in the Ivanti Connect Secure appliance this January.

Security pros say teams need to monitor for changes in the threat landscape and gain visibility to this evolving malware trend via frequent audits and purple team exercises.

Injected malicious JavaScript code gives attackers administrator rights on websites, and fills sites with SEO spam.

NIS2 mandates manufacturing organizations to implement stronger cybersecurity measures. Learn more about the directive and how to prepare.

Cisco, a leader in networking and cybersecurity solutions, introduced a range of new security incentives and promotions to maximize your profitability when selling Cisco Firewalls. Let's dive into our latest offerings.