The group's targets have primarily been North American and Israeli entities, with a focus on technology, government, defense, and healthcare.

Shlayer, a common macOS Trojan, received Apple's notary certification and place in the App Store -- twice.

Two flaws - one of them yet to be fixed - are afflicting a third-party plugin used by Magento e-commerce websites.

Pixm visually analyzes phishing websites from a human perspective to detect malicious pages people might otherwise miss.

The North Korea-backed group has launched several campaigns to raise revenue for cash-strapped nation's missile program, security experts say.

The RAT has been distributed in various campaigns over the past six months, targeting both European officials and Tibetan dissidents.

Multiple flaws in system software that causes errors in packet handling could allow an attacker to consume memory and crash devices.

Next week, Senior Analyst Dave Gruber of ESG will join cybersecurity company Cynet for a webinar to help companies better understand the promise and realities of emerging XDR technologies

From COVID-19 treatment to academic studies, keeping research secure is more important than ever. The ResearchSOC at Indiana University intends to help.

By following best practices and prioritizing critical issues, you can reduce the chances of a security breach and constrain the blast radius of an attempted attack. Here's how.

The findings of a new report validate the correlation between poor network hygiene and the prevalence of wider security issues in the digital supply chain.

Insider threats can be difficult to combat and manage due to budgetary limits, lack of staff, and insufficient tools, says Bitglass.

The US Department of Homeland Security teams up with Akamai and the Center for Internet Security to provide state and local governments with cybersecurity through DNS for free.

Not all exposed usernames and passwords present a threat. Here's how to quickly identify the ones that do.

Learn how you can enable the new Nextcloud end-to-end encryption.