Get yourself up to date with everything we've written in the last seven days – it's weekly roundup time.

From an operational standpoint, the foundation of CARTA starts with an assessment and then building the zero-trust principles on top of that.

A new BEC threat group is heralding more sophisticated email scams that target organizations without DMARC and squeeze as much money out of victims as possible.

Christopher Krebs, director of the CISA, will explain how the organization is leading the federal effort to support state and local officials in their mission to secure US elections this year.

Insider-threat security experts unravel the new normal during this time of remote working, and explain how to protect sensitive data from this escalating risk.

To truly understand cybersecurity trends, we must look beyond the headlines and ask more of the data. What you learn might surprise you.

The good news is that this was a bureaucratic necessity rather than an actual cybersecurity attack.

Traditional financial crime and cyberattacks are converging, requiring new skills and approaches to the problem, officials said.

The most attractive targets for data theft are businesses perceived as most likely to pay to prevent exposure of their information.

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

A data-stealing module in a recent sandboxed sample triggers browser-based fraud alerts for Trickbot victims — and shows something of the inner working of the malware's operators.

The Russian national was convicted of hacking into accounts at LinkedIn, Dropbox, and Formspring.

These oft-forgotten devices contain serious vulnerabilities that allow attackers to hack OT systems remotely, researchers will reveal at Black Hat USA next month.

A paramedic turned cybersecurity expert shares his experiences in both fields, highlights their similarities, and explains how they can learn from each other.

With employees likely to continue to spend much, if not all, of their time working from home, companies are focusing more on technologies to boost the security of their now-distributed workplace.

Exploitation of the bug can allow an attacker to lift sensitive information, delete files, execute code, carry out sabotage and more.

The average website includes content from 32 different third-party JavaScript programs, new study finds.

Confidential computing encrypts data in use as it's being processed and keeps that data encrypted in memory and elsewhere outside the CPU.

Last summer’s data leak at the hotel chain appears to be far more expansive than previously thought — or the credentials could come from a hack of DataViper.