Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Enterprise-grade protection.
Symantec's Data Center Security has earned Common Criteria certification, an independent verification of its enterprise-grade protection. This certification validates the product's security capabilities.
AWS has introduced OAuth support for its AWS MCP Server, enabling users to connect their agents using the same credentials and sign-in methods as the AWS Management Console or AWS CLI. This integration supports AWS Identity and Access Management (IAM) federation, AWS IAM Identity Center, and root or IAM users, providing a browser-based experience powered by industry-standard OAuth. Additionally, AWS has rolled out new security and governance tools, including global condition keys for OAuth, token introspection and revocation, dynamic client registration, new AWS CloudTrail elements, and an API for headless OAuth connectivity.
You can now connect your agents to the <a class="Link" href="https://docs.aws.amazon.com/agent-toolkit/latest/userguide/mcp-server.html" target="_blank" rel="noopener"...
A Russian state-linked group is exploiting hotel and hospitality Wi-Fi networks to target travelers globally through a campaign called CaptiveCrunch. The attackers manipulate DNS and HTTP traffic via captive portals, redirecting users to phishing pages mimicking Microsoft logins or delivering malware like the CornFlake RAT (remote access trojan) and ChocoShell infostealer.
Cisco Talos disclosed multiple vulnerabilities in WolfSSL, GeoVision, and VTK-DICOM. The vendors have patched the vulnerabilities. Snort rules are available for detection.