Penn State will pay $1.25m for failing federal cybersecurity standards in DoD and NASA contracts

The National Security Memorandum on AI sets out actions for the federal government to ensure the safe, secure and trustworthy development of AI

This high-severity flaw, dubbed FortiJump by security researcher Kevin Beaumont, has been added to CISA’s KEV catalog

The Data (Use and Access) Bill governs digital verification services and the use of personal data in public services, and will revamp the Information Commissioner’s Office

A new ISACA study has revealed that cybersecurity professionals are often overlooked in the development of AI policies

CISA has added Fortinet's FortiManager to its KEV catalog due to a critical CVE-2024-47575 vulnerability, posing serious risks to organizations.

Cyble Research & Intelligence Labs (CRIL) reports 13 new ICS vulnerabilities identified by CISA, urging organizations to act swiftly to mitigate risks.

The latest GenAI jailbreak technique tricks chatbots into returning restricted content by blending different prompt topics together.

Unauthenticated threat actors can remotely cause a denial-of-service (DoS) cyberattack within the Remote Access VPN software in Cisco's ASA and Firepower software.

Lazarus Group exploited Google Chrome zero-day, infecting systems with Manuscrypt malware

An attacker compromised one of Fortinet's most sensitive products and mopped up all kinds of reconnaissance data helpful for future mass device attacks.

Amazon's open-source Cloud Development Kit generates dangerously predictable naming patterns that could lead to an account takeover.

Even after the ransom is paid, such attacks lead to spikes in strokes and heart attacks and increased wait times for patients.

An unidentified threat actor has attempted to develop ransomware targeting macOS devices, posing as LockBit

A missing authentication flaw could allow an attacker to use a compromised FortiManager device to move laterally to other Fortinet devices and target enterprise environments

IT professionals highlight bad user behavior and a lack of security training as key hurdles to overcome this year