ReliaQuest warns threat actor innovation and infostealer activity helped to accelerate breakout time by 22% in 2024

CISA warns of serious ICS vulnerabilities in Schneider Electric and B&R Automation products and urges urgent action to protect critical infrastructure from cyber threats.

The Australian Government invests $6.4M in the Health Cyber Sharing Network to strengthen cybersecurity and protect Australian healthcare organizations from cyber threats.

While cyber criminals are increasingly targeting cloud infrastructure and using AI to scale their attacks, CISOs can’t afford to ignore the traditional threats.

Cybercriminals exploit government websites using open redirects and phishing tactics, bypassing secure email gateway protections

Discover the best penetration testing tools to secure your systems. Explore our guide and start improving your security today.

Managing third-party risk in the SaaS era demands a proactive, data-driven approach beyond checkbox compliance.

AI-related API vulnerabilities surged 1,205% in 2024, with 99% tied to API flaws, according to a new report by Wallarm

Google highlighted significant abuse of its Gemini LLM tool by nation state actors to support malicious activities, including research and malware development

Cato Networks highlighted how the recently emerged HellCat ransomware group is using novel psychological tactics to court attention and pressurize victims

Yet another spinoff of the infamous DDoS botnet is exploiting a known vulnerability in active attacks, while its threat actors are promoting it on Telegram for other attackers to use as well, in a DDoS-as-a-service model.

The threat actor is using a sophisticated network of VPNs and proxies to centrally manage command-and-control servers from Pyongyang.

VulnCheck initially disclosed the critical command-injection vulnerability (CVE-2024-40891) six months ago, but Zyxel has yet to mention its existence or offer users a patch to mitigate threats.

The Chinese firm said training the model cost just $5.6 million. Microsoft alleges DeepSeek ‘distilled’ OpenAI’s work.

The Chinese firm said training the model cost just $5.6 million. Microsoft alleges DeepSeek ‘distilled’ OpenAI’s work.

While Microsoft has boosted the security of Windows Print Spooler in the three years since the disclosure of the PrintNightmare vulnerability, the service remains a spooky threat that organizations cannot afford to ignore.