CVE-2020-9315 and CVE-2020-9314 in iPlanet version 7 will not receive patches.

The infostealer has gone above and beyond in its new anti-analysis and obfuscation tactics.

Attackers with physical access to targeted machines could exploit these flaws to access and copy data within minutes, researchers say.

Most are designed to help organizations address teleworking risks related to COVID-19 scams.

The latest SophosLabs report tells the story of how the infamous “Maze” ransomware has evolved over the past 12 months…

Threat actors are cooking up new features for the sophisticated banking trojan that targets Google Android apps and devices.

3.5 million user logins for the MobiFriends dating app are being offered for free on a popular dark web hackers forum.

Numbers are down, but that may only be because organizations have been too busy fighting COVID-19-related cyberthreats to notice compromises, Risk Based Security says.

Photo print service Chatbooks has disclosed a data breach after customers' emails, passwords and more were listed for sale on underground forums.

How governments can protect personal privacy in contact tracing while saving peoples' lives

To understand the scope of the ransomware threat, Sophos commissioned a study into the state of ransomware 2020.

Thunderbolt ports can provide direct access to the memory in your laptop… just how hard is it for crooks to do so when you aren’t looking?

Previously, manual contact tracing was used during pandemics. Now, the MIT Media Lab-hosted Safe Paths Project app can help track the virus and inform people if they've been exposed.

Canadian-based BlackBerry partnered with the University of Windsor to create a cybersecurity "camp" for students to matriculate online during the COVID-19 crisis.

Adobe patched 36 flaws, including critical vulnerabilities in Acrobat and Reader and its DNG Software Development Kit.

Severe CSRF to XSS bugs open the door to code execution and complete website compromise.

Attackers claim to steal 756GB of data from Grubman Shire Meiselas & Sacks, which includes Madonna and Lady Gaga among its clients.

Assuming an attacker has physical access to a machine, a new attack could let allow for the access of data on a locked, password protected, and encrypted hard drive.

Automation and other technologies are improving the organizational structure of the security operations center. This is ultimately for the better, but it means that roles will change too.

Using a known exploit to infect unmaintained systems, the WannaCry ransomware worm remains a study in preventable catastrophes. Yet many companies continue to ignore its lessons.