Credit to Author: BrianKrebs| Date: Mon, 21 Jul 2025 14:45:46 +0000
On Sunday, July 20, Microsoft Corp. issued an emergency security update for a vulnerability in SharePoint Server that is actively being exploited to compromise vulnerable organizations. The patch comes amid reports that malicious hackers have used the Sharepoint flaw to breach U.S. federal and state agencies, universities, and energy companies.
Read moreThis week on the Lock and Code podcast, we speak with Cait Conley about CISA’s election security measures and why your vote can’t be hacked.
Read more
Credit to Author: Ross McKerchar| Date: Wed, 26 Jun 2024 12:59:43 +0000
We are pleased to openly share our pledges and the progress we are making in each of the seven core pillars of product security in the Secure by Design framework.
Read more
Credit to Author: Chester Wisniewski| Date: Tue, 07 May 2024 21:00:44 +0000
Recent research finds signs of progress in the public-private alliance against ransomware
Read more
Credit to Author: Doug Aamoth| Date: Tue, 05 Mar 2024 18:06:53 +0000
Insights to support US organizations impacted by the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA).
Read moreA vulnerability in Roundcube webmail is being actively exploited and CISA is urging users to install an updated version.
Read moreCISA has ordered all FCEB agencies to disconnect all instances of Ivanti Connect Secure and Ivanti Policy Secure solution products.
Read more
Credit to Author: BrianKrebs| Date: Thu, 01 Feb 2024 18:41:37 +0000
Three Americans were charged this week with stealing more than $400 million in a November 2022 SIM-swapping attack. The U.S. government did not name the victim organization, but there is every indication that the money was stolen from the now-defunct cryptocurrency exchange FTX, which had just filed for bankruptcy on that same day.
Read moreCISA has added two Citrix NetScaler vulnerabilities to its vulnerability catalog, with a very short deadline to patch.
Read moreA remote code execution vulnerability in Apache ActiveMQ is being used by the HelloKItty ransomware group.
Read more