Latest News

The degree of danger that may be introduced when adversaries start to use AI as an effective weapon of attack rather than a tool for beneficial improvement is still unknown.

Attack surface management is nothing short of a complete methodology for providing effective cybersecurity. It doesn’t seek to protect everything, but concentrates on areas of IT infrastructure that can be attacked.

The question for 2023 and beyond is whether the cyberinsurance industry can make a profit without destroying its market.

Microsoft and Proofpoint are warning organizations that use cloud services about a recent consent phishing attack that abused Microsoft’s ‘verified publisher’ status.

All-in-one cybersecurity platform Guardz today emerged from stealth mode with $10 million in seed funding.

Our networks have become atomized which, for starters, means they’re highly dispersed. Not just in terms of the infrastructure – legacy, on-premises, hybrid, multi-cloud, and edge.

QNAP warns users of a critical vulnerability that allows attackers to inject malicious code on NAS devices.

Chainguard OpenVEX Spec adds clarity to Supply Chain Vulnerability warnings specifications to help software vendors and maintainers communicate precise metadata about the vulnerability status of products.

Identity and access governance vendor Saviynt has closed a $205 million financing round.

GitHub this week announced the revocation of three certificates used for the GitHub Desktop and Atom applications.

Russian Vladislav Klyushin made tens of millions of dollars by hacking into U.S. computer networks to steal insider information.

JD Sports discovers unauthorized access to information from orders placed by customers between 2018 and 2020.

Vulnerabilities in open source health records management software OpenEMR could lead to patient data compromise, remote code execution (RCE).

Russia-linked cyberespionage group APT29 has been observed using embassy-themed lures and the GraphicalNeutrino malware in recent attacks.

A researcher has disclosed the details of a 2FA bypass vulnerability affecting Instagram and Facebook.