Alexander Culafi

Threat actors are targeting Cleo managed file transfer products through two vulnerabilities, including a new zero-day flaw.

CISA published a mobile security guide Wednesday for "highly targeted" individuals to defend themselves against Chinese nation-state hacking campaigns.

This Risk & Repeat episode looks back on ransomware-related events in 2024, including the attacks and trends that defined the year.

Although data security vendor Cyberhaven disclosed that its Chrome extension was compromised on Dec. 24, additional research suggests the broader campaign may be months older.

Amit Yoran was a decades-long practitioner of cybersecurity and previously held key roles at the U.S. Department of Homeland Security, RSA Security and NetWitness.

Ivanti said Wednesday that threat actors have exploited stack-based buffer overflow vulnerability CVE-2025-0282 in Ivanti Connect Secure.

The FCC announced a new "Cyber Trust Mark" label to be added to IoT devices that meet the U.S. government's standards for cybersecurity.

BeyondTrust discovered the flaw last month while investigating breaches of a "limited number" of SaaS customers at the hands of Chinese state-sponsored threat actors.

A threat actor known as "Bensen Group" claimed to have published data of more than 15,000 compromised Fortinet FortiGate firewall instances.

With a new president in the White House, the future of CISA is anything but certain.