Software giant Microsoft has open-sourced its internal tool for generating SBOMs (software bill of materials) as part of a move to help organizations be more transparent about supply chain relationships between components used when building a software product.
Microsoft Patch Tuesday: 84 Windows Vulns, Including Already-Exploited Zero-Day
Microsoft has issued an urgent Patch Tuesday bulletin to warn of in-the-wild zero-day exploitation of a privilege escalation flaw in the Windows operating system.
Adobe Patch Tuesday: Critical Flaws in Acrobat, Reader, Photoshop
Software maker Adobe has rolled out a major security update for its flagship Acrobat and Reader products to fix at least 22 documented vulnerabilities, some serious enough to cause arbitrary code execution attacks.
UK Warns Lawyers Not to Advise Ransomware Payments
The NCSC and the ICO have warned UK lawyers not to advise clients to pay a ransom to cybercriminals
In a letter addressed to UK lawyers dated July 7, 2022, the UK’s National Cyber Security Center (NCSC) and the Information Commissioner’s Office (ICO), have reiterated – with teeth – the official stance on not paying a ransom.
As Cybercriminals Recycle Ransomware, They’re Getting Faster
Marriott Confirms Small-Scale Data Breach
International hotel chain Marriott has confirmed that an unknown threat actor has accessed data on a computer at one of its hotels.
Apple Adds ‘Lockdown Mode’ to Thwart .Gov Mercenary Spyware
Faced with a surge in state-sponsored mercenary spyware attacks targeting its flagship iOS platform, Apple plans to add a new ‘Lockdown Mode’ that significantly reduces attack surface and adds technical roadblocks to limit sophisticated software exploits.
Researchers Flag ‘Significant Escalation’ in Software Supply Chain Attacks
Security researchers at ReversingLabs are warning of a “significant escalation in software supply chain attacks” after discovering more than two dozen malicious NPM packages siphoning user data from mobile and desktop applications.
DoD Launches ‘Hack US’ Bounties for Major Flaws in Publicly Exposed Assets
The United States Department of Defense (DoD) has launched a one-week bug bounty program to reward researchers who find high- and critical-severity vulnerabilities in publicly accessible assets owned by the DoD.
Security Automation Firm Swimlane Closes $70 Million Funding Round
Security automation startup Swimlane on Wednesday announced it has raised $70 million in a Series C funding round that brings the total investment in the company to $170 million.











