Phishing is on the rise, ransomware continues to be a threat, and email exploits are more popular than ever. Here are the email security risks, and what you can do about them, in 2020.

The Brave browser has provoked unhappiness among some of its users after being caught redirecting searches to affiliate links that earned it commission.

Using nonwork authorized tech at home places company data at risk, especially since 23% of employees are unsure what security protocols exist on their devices, Morphisec found.

A dramatic uptick in scams, counterfeiting, and hacking plague retail and e-commerce industries during the coronavirus crisis, as businesses try to define their new normal.

A new SophosLabs report takes you inside a cryptomining gang.

As the work-at-home environment continues to inform new ways of doing business, it's important that security teams remain flexible and ready for change.

Embracing an "everyone is part of the security team" approach shifts DevOps to DevSecOps, according to a report from Cobalt.io.

Thousands of journalists, advocacy groups and politicians worldwide were targeted by Dark Basin.

The attack reportedly infected internal servers and forced Honda to halt production at plants around the world on Monday.

Critical Adobe Flash Player and Framemaker flaws could enable arbitrary code execution.

Facebook users will see notices labeling “state-controlled media”, based on criteria such as funding, editorial independence, ownership structure and more.

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

The Dark Basin group behind thousands of phishing and malware attacks is likely an India-based ethical hacking firm that works on behalf of commercial clients.

The FlowCloud RAT has overlaps with the LookBack malware and possibly China-linked APT10.

Even with strong security measures, Internet voting is still vulnerable to abuse from state-sponsored actors and malicious insiders.

The June Patch Tuesday update included CVEs for 11 critical remote code-execution vulnerabilities and concerning SMB bugs.

The vulnerability was patched in March, but a new proof of concept raises the stakes for organizations that haven't yet updated their software.

CallStranger flaw in UPnP allows attackers to launch DDoS attacks and scan internal ports, security researcher says.

The sudo system is about to undergo some radical changes. Find out how to begin working with the new policy system, to make sudo even more powerful.

The June release of security updates addresses several remote code execution vulnerabilities in SharePoint, Excel, Windows OLE, and other services.