Security Bulletin

Severely lacking military coordination and recruitment for U.S. cybersecurity efforts have prompted the Foundation for Defense of Democracies to urge Congress to immediately advance an independent Cyber Force that would ensure the country's cyber...

Cyberespionage operations have been conducted by a pair of Chinese advanced persistent threat groups against organizations in countries part of the Association of Southeast Asian Nations since January, The Hacker News reports.

Major cyber risk quantification service provider DeNexus and cybersecurity firm Cipher Security have partnered to better evaluate industrial control system and operational technology cybersecurity risks faced by critical infrastructure organizations...

TechCrunch reports that Facebook was revealed to have covertly conducted Snapchat network traffic interception and decryption since 2016 as part of the initiative dubbed "Project Ghostbusters" that sought to bolster user behavior analysis and better...

More than 1,800 stores on major e-commerce platform Shopify using Saara's EcoReturns and WyseMe plugins had 25 GB of data exposed due to the developer's misconfigured MongoDB database, according to Cybernews.

Major UK street newspaper and social enterprise The Big Issue had its systems confirmed to be impacted by a cyberattack days after the intrusion was admitted by the Qilin ransomware operation, which claimed the exfiltration of 550 GB of confidential...

CVE: CVE-2024-28872 Title: Incorrect TLS certificate validation can lead to escalated privileges Document version: 1.0 Posting date: 27 March 2024 Program impacted: Stork Versions affected: Stork 0.15.0 -> 1.15.0 Severity: High Exploitable: Remotely...

Industrial cyberespionage could potentially be facilitated by the new suspicious SqzrFramework480 NuGet package seemingly targeted to developers using tools by Chinese industrial firm Bozhon Precision Industry Technology Co., according to The Hacker...

Today, Google released its report “We’re All in this Together: A Year in Review of Zero-Days Exploited In-the-Wild in 2023.”

Today, Google released its report “We’re All in this Together: A Year in Review of Zero-Days Exploited In-the-Wild in 2023.”

Today, I noticed in our "first seen URL" list, two URLs I didn't immediately recognize:

Security Cloud is the future for Cisco Security and our customers that requires the utmost in engineering agility from us