Why making every front-end developer a DevSecOps expert will lead to a more holistic approach to web and native application security.

In contrast, Q1 2019 saw more interest in selling and buying access to individual servers.

The sudo system is about to undergo some radical changes. Find out how to begin working with the new policy system, to make sudo even more powerful.

Researchers shows most flight-risk employees planning to leave an organization tend to start stealing data two to eight weeks before they go.

The number of data breaches for financial gain are up, so are cloud-based data attacks, while cyber-espionage is down, according to the annual report.

The long debate over whether encryption and anonymity shield too much criminal behavior also has staged a resurgence.

Cyberattacks against hospitals and medical facilities have risen this year, often via ransomware and social engineering exploits, says IntSights.

This week sees the early arrival of Chrome 83 with a longer list of new security features than originally planned.

Cybercriminals are taking advantage of the Google name and the cloud to convince victims into handing over their login details.

Cybercriminals are hunting out victims' Office 365 credentials - by dishing out Supreme court "summons" in a phishing attack.

US states are being flooded by fraudulent unemployment applications in a scam run by a sophisticated cybergang.

Vulnerabilities in the Bluetooth authentication process give attackers a way to insert rogue devices between two securely paired devices, academic researchers find.

Looks as though at least one of these patches was supposed to come out a week ago but ended up delayed until now…

This week we discuss a customer who went to Subway for a sandwich and left with a stalker, demon printers and the things you should patch now. I host the show this week with Sophos experts Mark Sto…

With the current upheaval, business leaders may lose focus and push off implementing security measures, managing risk, and keeping up with compliance requirements. That's a big mistake.

The malware-as-a-service is advanced, obfuscated and modular — and built for mass campaigns.

Cisco has fixed a critical remote code execution flaw in its popular customer interaction management solution.

Stolen in a recent breach, the names, email addresses, encrypted passwords, and other data of Home Chef customers are being sold on the Dark Web.

Working remotely presents key security challenges, but employees may actually be following security rules more carefully when working from home, says 1Password.

By committing to independent testing to determine value, vendors will ensure that their products do what they say they do.