Cybersecurity News, Awards, Webinars, eSummits, Research

New York’s Department of Financial Services hit OneMain Financial with a massive penalty, reflecting the severity of security failures found during an audit tied to multiple data breaches.

Researchers say the newly discovered malware targeting electric utilities is becoming easier for threat groups to leverage against OT and ICS systems.

Dig Security researchers said the flaw could have let attackers escalate privileges to a sysadmin role on a container, allowing access to GCP data.

After the Supreme Court overturned Roe v. Wade, Google committed to modifying data retention policies for sensitive locations that could put users at risk.

Volt Typhoon, believed to be a state-sponsored China-based APT group, has been executing “stealthy and targeted” attacks against U.S. organizations, including in Guam.

Critical flaw in the Expo framework that allowed them to take over user accounts via the Open Authorization (OAuth) protocol. 

Cado Security researchers believe Legion was developed in Indonesia with an eye toward selling it to other attackers for exploiting cloud services.