135 article(s) in our index mention this organisation.
This Patch Tuesday, Siemens released 17 security advisories addressing vulnerabilities in its industrial automation products, including Simatic S7-1500 CPUs, Ruggedcom devices, and various Simatic WinCC products. CISA an…
The FBI has seized seven web domains linked to Chinese hacking tools operated by Integrity Technology Group, a firm linked to Beijing-backed cyber operatives. The FBI has disrupted a 260,000-device botnet associated with…
U.S. and international agencies seized tools developed by Integrity Tech, a Chinese cybersecurity firm hired by the PRC’s Ministry of State Security, to combat a long-running hacking campaign known as Flax Typhoon. The J…
A U.S. and Israeli national, Zohar Pinhasi, owner of ransomware recovery firm MonsterCloud, has been charged with wire fraud for allegedly deceiving clients by claiming he could decrypt their systems without paying ranso…
A group of OT cybersecurity experts are urging the CISA to create a mandatory federal operational technology (OT) rule. Their proposed directive would establish a uniform, government-wide baseline and give CISA the abili…
The FBI and Secret Service issued warnings about the ongoing FortiBleed campaign, where over 86,000 internet-facing Fortinet FortiGate firewalls have been compromised. The campaign is being used by ransomware affiliates,…
The US Senate has passed the Health Care Cybersecurity and Resilience Act, a bipartisan bill designed to bolster cybersecurity defenses within the healthcare sector. It aims to combat the growing threat of ransomware att…
A critical zero-day vulnerability (CVE-2026-104286) in Fortinet's FortiMail software has been actively exploited in the wild, prompting CISA to urge immediate action.
This week’s ‘ThreatsDay’ bulletin highlights a diverse range of emerging threats, from AI-powered attacks to sophisticated malware distribution frameworks. Key concerns include AI-poisoning of search engines to deliver p…
Google and Wiz have launched Scan for Good, an initiative utilizing AI agents (Gemini 3.8 Flash Cyber and Wiz’s Red Agent) to proactively identify security vulnerabilities in critical infrastructure and public services.…
NIST released a draft update to its OT security guide, expanding sector coverage and incorporating the NIST Cybersecurity Framework 2.0.
Threat actors are actively exploiting a critical WordPress vulnerability (CVE-2026-87902) within hours of its disclosure.
The FBI and CISA have released a fact sheet highlighting the risks associated with using third-party industrial control system (ICS) integrators, particularly those owned by foreign entities. It specifically warns about…
F5 has warned organizations about a critical zero-day vulnerability in its BIG-IP Access Policy Manager (APM) that is being actively exploited by threat actors. CISA has added the vulnerability to its list of known explo…
The Cybersecurity and Infrastructure Security Agency (CISA) has released a guide encouraging organizations, particularly those with limited security resources, to utilize deception technology to improve threat detection…
Two Colorado water utilities were targeted in a cyberattack that aimed to disrupt operations by altering industrial control system settings. While the exact actors remain unknown, the incidents align with a broader campa…
The CISA is ending its weekly vulnerability bulletins, shifting to a risk-based approach to vulnerability management. This change is driven by the observation that attackers primarily exploit a small subset of vulnerabil…
CISA is ending its weekly vulnerability bulletin in favor of a risk-based approach, shifting focus to actively exploited vulnerabilities through its KEV catalog. This change is intended to combat alert fatigue and improv…
The CISA released guidance on using cyber decoys to bolster an organization’s ability to detect and respond to cyberattacks, particularly those leveraging living-off-the-land techniques. This strategy is designed to comp…
A critical vulnerability in Cisco Secure Email Gateway software (AsyncOS) has been actively exploited in the wild, allowing unauthenticated attackers to execute arbitrary commands with root privileges. Cisco has released…
