Security Bulletin

In part 2, FortiGuard Labs' Derek Manky discusses cyberattacks via known vulnerabilities that have patches available, among other topics.

FortiGuard Labs' Derek Manky discusses how quickly cybercriminals are exploiting new industry vulnerabilities.

While Google confirmed that the bug exists in the wild, security researchers say there has yet to have been an instance of active exploitation.

The attack cut off access to electronic healthcare records (EHRs) and ordering systems, plunging the organization and its health services into chaos.

California-based online mental health provider BetterHelp was noted by the Federal Trade Commission to have begun distributing refunds part of the $7.8 million settlement for alleged data privacy violations to nearly 800,000 individuals, reports The...

LockBit ransomware gang administrator LockBitSupp has denied being Russian national Dmitry Yuryevich Khoroshev, who he says was mistakenly identified as the prolific ransomware operation's leader, according to The Record, a news site by cybersecurity...

U.S. Deputy National Security Advisor for Cyber and Emerging Technology Anne Neuberger disclosed the Biden administration's plans to establish minimum cybersecurity standards for hospitals following the widespread ransomware attack against...

Breaches are inevitable. Here are four steps to recovery and future-proofing your business.

Episode 1 of Dark Reading Confidential brings Frederick “Flee” Lee, CISO of Reddit, Beth Burgin Waller, a practicing cyber attorney who represents many CISOs, and Ben Lee, Chief Legal Officer of Reddit, to the table.

Chinese cyberespionage group Volt Typhoon's infiltration of U.S. critical infrastructure entities has been regarded by federal officials to have marked a paradigm shift on how state-sponsored threat actors could facilitate widespread compromise...

Russian state-sponsored threat operation APT28 has launched a far-reaching malware campaign against government organizations across Poland, according to The Hacker News.

BleepingComputer reports that widely used cloud-based project management platform Monday.com had its "Share Update" feature removed following its exploitation to facilitate the delivery of phishing emails from its email accounts disclosed by its...