Security Bulletin

Threat actors have launched a new phishing campaign using fraudulent bank payment notifications to facilitate the deployment of the Agent Tesla information-stealing and keylogging malware, The Hacker News reports.

The Cybersecurity and Infrastructure Security Agency has unveiled a draft cyber incident disclosure rule created under the Cyber Incident Reporting for Critical Infrastructure Act that would mandate organizations part of the 16 designated critical...

Cisco released security updates to address vulnerabilities in Cisco IOS, IOS XE, and AP software. A cyber threat actor could exploit some of these vulnerabilities to cause a denial-of-service. CISA encourages users and administrators to review the...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Attackers trigger hundreds of password reset prompts in an attempt to take over iCloud accounts.

CISA encouraged security teams handling industrial control systems to review and mitigate the Rockwell Automation bugs.

A certification for zero-trust could work much like it does for IoT products, offering a standard so buyers know new zero-trust products are secure.

Traditional network management solutions can't keep up with the demands of cloud adoption, remote work, and ever-growing user expectations. SD-Routing brings a simplified, frictionless approach to full lifecycle management across the WAN edge that...

Only 3% of organizations around the world were reported to be completely ready to deal with increasingly sophisticated cybersecurity threats, including ransomware attacks and supply chain intrusions, reports SiliconAngle.

The U.S. Department of Justice announced that Idaho and Montana resident Scott Rhodes was fined $9.9 million for conducting thousands of "illegal and malicious" robocalls, or automated phone calls, with disturbing pre-recorded messages across the U.S...