Latest News

San Francisco-based identity and access management (IAM) solutions provider ForgeRock has raised $93.5 million in a Series E funding round, which brings the total raised by the company to more than $230 million.

A security researcher says IBM has told him that it would not be patching several vulnerabilities found in its Data Risk Manager product, despite demonstrating that they can be exploited by a remote, unauthenticated attacker to execute arbitrary code with root privileges. [UPDATE BELOW]

South Korean video gaming company Gravity is the latest victim of the China-linked threat actor tracked as the Winnti Group, security researchers say.

The Supreme Court agreed Monday to decide a case from Georgia about the reach of a federal computer hacking law.

A DLL side-loading vulnerability related to the Microsoft Terminal Services Client (MSTSC) can be exploited to bypass security controls, but Microsoft says it will not be releasing a patch due to exploitation requiring elevated privileges.

Google this week announced the availability of a cloud-based solution meant to help work-from-home employees securely access enterprise resources.

Google this week announced the creation of a COVID-19 grant fund aimed to help bug hunters who participate in its Vulnerability Reward Program (VRP).

A potentially serious vulnerability discovered by researchers in Field Programmable Gate Array (FPGA) chips can expose many mission- and safety-critical devices to attacks.

The Tor Project is laying off a third of its staff due to the current COVID-19 outbreak, the non-profit organization has announced.The developer of the popular privacy-focused Tor Browser said the crisis hit it hard, forcing it to make some difficult decisions.

Patching vulnerable enterprise VPNs from Pulse Secure is not enough to keep out malicious actors who have already exploited a vulnerability, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns.

US Secretary of State Mike Pompeo said Saturday he was concerned by 'malicious' cyber attacks that have targeted Czech hospitals battling the novel coronavirus.

Massachusetts and Indiana, the only two U.S. states that independently sued Equifax over the massive data breach that occurred in 2017, have settled with the credit reporting agency for a total of close to $40 million.

Even seemingly insignificant Internet of Things (IoT) devices such as LED light control consoles can be abused to launch malicious attacks, Microsoft’s security researchers warn.

Twitter will not be allowed to disclose more information on national security requests after the U.S. government convinced a judge that the disclosure of such information could harm national security.