ransomware hospital — both words
"data breach" — exact phrase
malware -android — exclude a word
(apple OR microsoft) patch — either company, plus patch
ransom* — a wildcard match
Searches article titles, summaries, keywords and sources. Filters use publication dates.
1–10 of 29 articles
Best match · title matches first
Dark Reading
The National Institute of Standards and Technology carved a new path for vulnerability remediation by changing the way it prioritizes software flaws.
The Hacker News
Every CISO knows the uncomfortable truth about their Security Operations Center: the people most responsible for catching threats in real time are the people with the least experience. Tier 1 analysts sit at the front line of detection, and yet they are also the most vulnerable to the cognitive and organizational pressures that quietly erode SOC performance over time. The Paradox at the Gate:
The Register
‘Elite teams’ are pondering cyber-attacks to turn off energy supply or telecoms networks The head of Australia’s Security Intelligence Organisation (ASIO) has warned that authoritarian regimes “are growing more willing to disrupt or destroy critical infrastructure”, using cyber-sabotage.…
The Register
How SSH Communications Security cuts through the hype around Zero Trust to secure the connections that matter As business enters the 2020s, organizations find themselves protecting fast-expanding digital estates using security concepts that are decades old.… Sponsored Feature
Krebs on Secuity
Web hosting giant GoDaddy made headlines this month when it disclosed that a multi-year breach allowed intruders to steal company source code, siphon customer and employee login credentials, and foist malware on customer websites. Media coverage understandably focused on GoDaddy's admission that it suffered three different cyberattacks over as many years at the hands of the same hacking group. But it's worth revisiting how this group typically got in to targeted companies: By calling employees and tricking them into navigating to a phishing website.
ZDNet Security
Microsoft creates new categories with higher bonus awards for bugs affecting Office 365, Dynamics and Power Platform products.
Bleeping Computer
Microsoft has increased the maximum awards for high-impact security flaws reported through the Microsoft 365 and the Dynamics 365 / Power Platform bug bounty programs. [...]
Graham Cluley
A surge in "sophisticated, high impact" ransomware attacks has prompted the United States, UK, and Australian cybersecurity agencies issue a joint advisory about the techniques being used by cybercriminals to attack businesses and organisations. Read more in my article on the Tripwire State of Security blog.
Bleeping Computer
Google has expanded its Cloud Vulnerability Reward Program (VRP) with a new top-tier reward for high-impact architectural security flaws. [...]
Check Point Research
TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from a missing authorization check on the /config/update endpoint, which allowed any authenticated user (including low-privileged accounts) to modify the […] The post appeared first on . When LLM Gateways Go Wrong: Findings from LiteLLM Check Point Research