Security Bulletin

Attacks taking over F5 BIG-IP devices could be conducted by exploiting high-severity vulnerabilities impacting the BIG-IP Next Central Manager, tracked as CVE-2024-21793 and CVE-2024-26026, The Hacker News reports.

Threat actors have leveraged Ivanti Connect Secure and Policy Secure zero-day vulnerabilities, tracked as CVE-2023-46805 and CVE-2024-21887, to facilitate the deployment of the Mirai botnet, reports Security Affairs.

Hackread reports that IntelBroker has exposed sensitive data allegedly stolen from major UK-based international financial services firms Barclays and HSBC following a purported attack against a third-party contractor last month that was conducted...

Our brand-new podcast, Dark Reading Confidential, has officially launched. You don't want to miss our first episode with the CISO and chief legal officer from Reddit and a cybersecurity attorney, who share their thoughts and advice for CISOs on the...

Kevin Mandia, CEO of Mandiant at Google Cloud, calls for content "watermarks" as the industry braces for a barrage of mind-bending AI-generated fake audio and video traffic.

SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories...

Today, CISA, in partnership with the Federal Bureau of Investigation (FBI), the Department of Health and Human Services (HHS), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) released joint Cybersecurity Advisory (CSA)...

Here are four practical steps security teams can take to more effectively prepare for inevitable ransomware attacks.

A 2024. 19. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2024.05.03. és 2024.05.09. között kezelt incidensek statisztikai adatait is tartalmazza.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

New regulations will require the private sector to turn over incident data to CISA within three days or face enforcement. Here's how the agency is presenting this as a benefit to the entire private sector.

Researchers recently spotted the Spanish-speaking threat actor — with nearly 400 previous victims under its belt — in a new campaign in Latin America and Central Africa.