In an advisory last week, the NSA warned that a flaw in the Exim mail transfer agent (MTA) has been exploited by Russian cyber military actors since last August.

The breach exposed usernames and passwords of an undisclosed number of program members.

Understaffed and under fire, companies fail to report cybercrimes even when they are legally obligated to notify authorities, results of a new survey show.

Organizations need to include smartphones and tablets in their phishing mitigation strategies, a new report suggests.

Insider cyber threats are always an issue during layoffs -- but with record numbers of home office workers heading for the unemployment line, it's never been harder to maintain cybersecurity during offboarding.

Full backup copies of website, including all user data, was exposed for 2,700 JRD users.

We’re absolutely delighted – delighted and proud! – to report that we won not one but two awards at last night’s European Security Blogger Awards 2020.

Cybersecurity, remote IT troubleshooting and cloud support will be the most sought-after skills for businesses in the months following the COVID-19 pandemic, according to a survey of CIOs and tech executives.

Here's how employees in the US, UK, France and Germany are putting systems at risk, according to CyberArk.

Unauthorized access was the most common type of attack in 2019, and it was responsible for 40% of all data breaches, says ForgeRock.

Increase of 37 percent from Q4 2019 to Q1 2020 attributed to creation of remote workforce due to COVID-19 stay-at-home orders.

Security pros need to double down around prevention of lateral movement by attackers, especially if IoT devices are connected to the network.

The US rail service hasn’t disclosed the number of passengers affected in a 16 April breach.

VMWare’s VMware Cloud Director has a security flaw that researchers believe could be exploited to compromise multiple customer accounts using the same cloud infrastructure.

If you're the Nextcloud admin for your company or home office, you might want to restrict who has access to the ONLYOFFICE suite of tools. Jack Wallen shows you how.

A privilege-escalation vulnerability patched in February by Microsoft continues to affect Exchange servers, with more than 80% of Internet-connected servers remaining vulnerable, one firm reports.

Researchers warn of critical flaws in SAP's Sybase Adaptive Server Enterprise software.

The stealthy backdoor is delivered via mass-market phishing emails that are well-crafted to appear convincing.

How time flies – the latest four-weekly Firefox update is out.