The FTC is seeking comment on whether or not it should make changes to its Health Breach Notification Rule, a rule that compels orgs to disclose when health records are breached.

Trend Micro researchers explain how attackers bypassed the patch for a deserialization vulnerability in the Oracle WebLogic Server.

Billions of data points are gathered throughout the UPS network every week. Find out how the information collected is revolutionizing the logistics giant.

CVE-2020-9315 and CVE-2020-9314 in iPlanet version 7 will not receive patches.

The infostealer has gone above and beyond in its new anti-analysis and obfuscation tactics.

Attackers with physical access to targeted machines could exploit these flaws to access and copy data within minutes, researchers say.

Most are designed to help organizations address teleworking risks related to COVID-19 scams.

The latest SophosLabs report tells the story of how the infamous “Maze” ransomware has evolved over the past 12 months…

Threat actors are cooking up new features for the sophisticated banking trojan that targets Google Android apps and devices.

3.5 million user logins for the MobiFriends dating app are being offered for free on a popular dark web hackers forum.

Numbers are down, but that may only be because organizations have been too busy fighting COVID-19-related cyberthreats to notice compromises, Risk Based Security says.

Photo print service Chatbooks has disclosed a data breach after customers' emails, passwords and more were listed for sale on underground forums.

How governments can protect personal privacy in contact tracing while saving peoples' lives

To understand the scope of the ransomware threat, Sophos commissioned a study into the state of ransomware 2020.

Thunderbolt ports can provide direct access to the memory in your laptop… just how hard is it for crooks to do so when you aren’t looking?

Previously, manual contact tracing was used during pandemics. Now, the MIT Media Lab-hosted Safe Paths Project app can help track the virus and inform people if they've been exposed.

Canadian-based BlackBerry partnered with the University of Windsor to create a cybersecurity "camp" for students to matriculate online during the COVID-19 crisis.

Adobe patched 36 flaws, including critical vulnerabilities in Acrobat and Reader and its DNG Software Development Kit.

Severe CSRF to XSS bugs open the door to code execution and complete website compromise.

Attackers claim to steal 756GB of data from Grubman Shire Meiselas & Sacks, which includes Madonna and Lady Gaga among its clients.