Ionut Arghire

EPA and CISA urge organizations in the water and wastewater systems sector to harden remote access to internet-exposed human-machine interfaces (HMIs).

CISA has updated its National Cyber Incident Response Plan in line with the changing threat landscape and is now seeking public comment.

A critical vulnerability in BeyondTrust Privileged Remote Access and Remote Support could lead to arbitrary command execution.

Researchers warn of malicious attacks exploiting a recently patched critical vulnerability in Apache Struts 2 leading to remote code execution (RCE).

CISA's Binding Operational Directive 25-01 requires federal agencies to align cloud environments with SCuBA secure configuration baselines.

Fortinet has released patches for a critical-severity path traversal vulnerability in FortiWLM that was reported last year.

Google has released a Chrome 131 update to patch multiple high-severity memory safety vulnerabilities, including three affecting the V8 JavaScript engine.

In light of recent Chinese hacking into US telecom infrastructure, CISA has released guidance on protecting mobile communications.

Raccoon Infostealer MaaS operator Mark Sokolovsky was sentenced to 60 months in prison in the US and agreed to pay over $910,000 in restitution.

The Play ransomware group claims to have stolen sensitive data from donut and coffee retail chain Krispy Kreme.