The ransomware gang was spotted exploiting the vulnerability just two days after Apache disclosed the flaw and released patched versions of the software. 

The Forum of Incident Response and Security Teams (FIRST) published CVSS 4.0 with an eye toward delivering finer granularity around threat intelligence metrics.

Researchers speculate that Chinese authorities may be responsible for turning off one of the internet’s most prolific IoT botnets.

Respondents in an ICS2 workforce study expect the combination of economic uncertainty, a workforce skills gap and emerging technology to lead to a decrease in cybersecurity hiring.

Critical 9.4 vulnerability lets attackers steal the token of recently connected users, allowing the attacker to gain access to whatever resources the user has permissions to access in Citrix.

While cloud security investments are starting to pay off, respondents to a CyberRisk Alliance survey say their organizations still face skills gaps and lack visibility into the cloud.

In one sampling, Adaptive Shield reported that only 1% of 5,000 vulnerable companies are still exposed.

Gutsy’s cofounder discusses the use of the data science of process mining into cybersecurity.