Atlassian has issued fixes for a critical flaw in its Jira software, which threat actors could exploit to evade authentication protections.

Chief information security officers have been preparing for cyberattacks against critical infrastructure entities amid the ongoing Russian invasion of Ukraine.

The Department of Energy is putting $12 million in new grant funding behind six university-led cybersecurity research projects that look for innovative ways to securely build or design the nation’s next generation of energy systems.

A settlement has been reached in the class action data breach lawsuit against Solara Medical Supplies, over a months-long, undetected email systems hack, requiring a long list of security requirements.

Despite a surge in cybercrime, Visa reported record-lows in cyber fraud as the company has invested in security innovation and analytics.

SecurityWeek reports that Facebook parent firm Meta has expanded its bug bounty program to include rewards for flaws that could be abuse to evade Facebook integrity checks, including two-factor authentication for some business manager accounts, as well as the platform's feature restrictions and application verification processes.

The Hacker News reports that SonarSource has identified a high-severity vulnerability in the open-source RainLoop web-based email client which could be leveraged for email exfiltration.

Despite growing operational technology security awareness amid increasing cybersecurity threats, 40% of industrial organizations reported a lack of compatibility between their security and automation systems, SecurityWeek reports.