Meanwhile, CISA joins the call to patch CVE-2023-4966 immediately amid reports of mass-exploit activity; at least 5,000 orgs remain exposed.

SysAid has patched a zero-day vulnerability that could allow attackers to exfiltrate data and launch ransomware.

A class action suit claims Intel knowingly sold billions of faulty chips for years. The outcome could help define where poor vulnerability remediation becomes outright negligence.

In the summer of 2022, KrebsOnSecurity documented the plight of several readers who had their accounts at big-three consumer credit reporting bureau Experian hijacked after identity thieves simply re-registered the accounts using a different email address.…

Research from Infoxchange indicates that poor cyber security practices in Australia’s NFP sector are putting its donors’ data at risk.

SaaS applications are the new supply chain and, practically speaking, SaaS is the modern vendor. Here are three straightforward steps to manage this new vendor risk.

Process failures are the root cause of most serious cybersecurity incidents. We need to treat security as a process issue, not try to solve it with a collection of tools.

A federal push to enforce cybersecurity requirements is holding public companies and government contractors accountable as a matter of law and for national security.

Threat actors distributed an archive containing images of new products by major clothing companies, along with a malicious executable disguised with a PDF icon.

The influx of generative AI could cause security leaders to learn new skills and defensive tactics.

Complexity impedes the universal and consistent application of security policies, which is an obstacle to adequately securing government environments.

Read more about a cyberattack from Russian threat actor Sandworm which disrupted an electrical substation in Ukraine last year.

Hunters International appears to have acquired Hive ransomware from its original operators and may be seeking to cash in on the malware's reputation.

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

By creating a plan of action, organizations can better respond to attacks.

The so-called TA402 group continues to focus on cyber espionage against government agencies with the "IronWInd" malware.

The swift-moving ransomware crew continues to evolve quickly and has already attacked more than 350 victims since it was first detected just over a year ago.

A pair of lawsuits are part of a wider strategy to establish guardrails preventing AI-powered scams, frauds, and harassment, Google's general counsel says.

The U.K.'s position as a financial services hub puts it ahead in enterprise-wide IT automation, says Red Hat. But skills shortages remain an issue for all IT leaders surveyed.

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

Targeted attacks against two dozen related companies is just the latest evidence that hackers want a piece of energy.