US launches vulnerability clearinghouse amid AI-fueled surge in flaws
The Trump administration hopes the program will accelerate the discovery and fixing of serious technical problems before hackers exploit them. Source link
Category: CyberSecurityDive
CISA warns that multiple vulnerabilities in SharePoint are under exploitation
Security researchers say additional flaws are being chained together and a patch will not be available until August. Source link
Healthcare sector faces persistent challenges with supply-chain security, identity management
A new report says doctors and nurses should train for cyberattacks the way firefighters train for major blazes — even if they expect them to…
Sharp rise in AI adoption for cyber defense exposes major governance gap
A report by the SANS Institute indicates a split between senior security leaders and frontline practitioners. Source link
Hackers find a new trick to collect Microsoft Entra user data without raising red flags
Organizations should check their logs for signs of an increasingly popular obfuscation technique, Proofpoint said. Source link
US authorities warn that state-linked hackers are targeting vulnerable networking devices
Hackers linked to Russian intelligence have exploited vulnerabilities in Cisco Smart Install devices. Source link
When cybercriminals outrun the feed
There is a moment in almost every investigation when the toolchain stops being a toolchain and turns into a browser tab problem. You have an…
CISA details security lapses that led to GitHub leak of passwords, cloud access keys
Weak security controls around the use of public GitHub code repositories allowed a contractor for the Cybersecurity and Infrastructure Security Agency (CISA) to accidentally leak…
Ransomware ecosystem grows, but ‘four-headed monster’ dominates
AI is helping hackers, a new report finds, but mostly by automating very human behaviors. Source link
Data breach hits car insurance provider
Hackers gained access to more than 6.9 million records at AssuranceAmerica by targeting a company employee. Source link
Sophisticated threat campaign pushes Cisco to the very edge
A monthslong exploitation wave against Cisco SD-WAN systems raises larger questions about trust and the insecurity of network infrastructure. Source link
Accenture faces massive data breach that could put clients at risk
The threat actor claiming responsibility says they stole source code, encryption keys and more. Source link