Reports provide structured accounts of cyber incidents, vulnerabilities, and controls, helping readers assess security risks and responses.
Search across headline titles and summaries.
Background for this topic.
A report is a documented account of an event, investigation, assessment, or analysis, supported by evidence and presented for others to review. In information security, the term commonly covers incident findings, vulnerability research, threat-intelligence assessments, audit results, and surveys of security practices. A useful report states its scope, methods, evidence, timeframe, and level of confidence rather than presenting conclusions without context.
Reports help practitioners prioritize remediation, validate controls, and improve incident response, but their details require careful interpretation. A vulnerability report should identify affected versions, exploit conditions, and mitigation steps; an incident report should distinguish confirmed facts from assumptions and protect sensitive personal or investigative data. Threat reports may contain indicators of compromise that need verification before being used in detection systems. Reports used for compliance or executive decisions should preserve a clear evidence trail, since incomplete scope, outdated findings, or undisclosed conflicts can lead to misplaced security priorities.
A new strain of JavaScript dropper has been observed delivering next-stage payloads like Bumblebee and IcedID
Network and IT admins have been dealing with ongoing Microsoft 365 issues this week, reporting that some end users cannot use Microsoft Outlook or other Microsoft 365 apps. [...]
Millions of software repositories on GitHub are likely vulnerable to an attack called RepoJacking, a new study has revealed
Kaspersky report that the implant specifically targets iOS devices via a malicious iMessage attachment
More details have emerged about the spyware implant that's delivered to iOS devices as part of a campaign called Operation Triangulation
KnowBe4 report revealed that 35.2% of users with no security training were prone to clicking on suspicious links
A highly targeted cyber attack against an East Asian IT company involved the deployment of a custom malware written in Golang called RDStealer
Over 100,000 compromised OpenAI ChatGPT account credentials have found their way on illicit dark web marketplaces between June 2022 and May 2023, with India alone accounting for 12,632 stolen credentials
New Armis research found that many National Health Service Trusts struggle with a lack of visibility and monitoring of their connected assets
Cybersecurity researchers have uncovered a set of malicious artifacts that they say is part of a sophisticated toolkit targeting Apple macOS systems