Security Bulletin

Significant industrial control system environment compromise could be facilitated by exploiting vulnerabilities impacting open source network security monitoring tool Zeek's ICS protocol parsing plugin Ethercat.

VMware released a security advisory to address multiple vulnerabilities in ESXi, Workstation, Fusion, and Cloud Foundation. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users...

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-23225 Apple iOS and iPadOS Memory Corruption Vulnerability CVE-2024-23296 Apple iOS and iPadOS Memory Corruption...

The QUIC protocol has slowly (pun intended) crawled into our browsers and many other protocols. Last week, at BSides Zagreb I presented some research I did about applications using (and abusing) this protocol, so it made sense to put this into one...

While the tools are different, protecting identities has been around for generations. So why haven't we learned how to leverage identity to establish a perimeter?

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Announcing changes to Cisco’s Executive Leadership Team that are designed to accelerate our innovation, drive greater simplicity, and double-down on our growth efforts.

Research suggest employees are increasingly sending sensitive data to OpenAI’s chatbot.

Cash flow crisis lurks among providers and affected third-party companies in healthcare.

Join our healthcare team at HIMSS 2024, and learn firsthand why healthcare organizations like yours trust Cisco.

Apple today released iOS 17.4 as well as iOS 16.7.6 (and the respective iPadOS versions). These updates fix a total of four vulnerabilities. Two of the vulnerabilities are already being exploited. CVE-2024-23225 is a privilege escalation issue and...

TeamCity servers risk being exposed to “complete compromise” if patch isn’t installed, researchers warned.