Hackers targeting organizations's partners or contractors in hopes of obtaining credentials.

Thousands of social media ads promoted sites impersonating legitimate GenAI tools.

Lack of identity basics expose companies to compliance penalties and increased breach risk.

An ongoing international effort against cybercrime operators has announced a mass takedown of ransomware networks.

The risks of data supply chain poisoning and malicious data tampering are addressed in the guidance.

CISA believes the attacks on Commvault Azure environments may be part of a larger campaign to target SaaS vendors.

The U.S. Department of Justice teamed up with Microsoft to take down the backbone of a prolific malware operator.

Analysis revealed the deployment of various backdoors by suspected Chinese-speaking threat actors.