Adherence to data protection regulations requires a multidisciplinary approach that has the commitment of all employees. Expect to be asked questions like these.

A researcher discovered a cross-site scripting flaw in Google Map's export function, which earned him $10,000 in bug bounty rewards.

A new dynamic tool developed by Columbia University researchers flagged cryptography mistakes made in more than 300 popular Android apps.

Security spending growth will slow in 2020, but purse strings are looser than for other areas of IT.

Small and midsized businesses cited budget constraints as their biggest security obstacle, according to Untangle.

Five critical cross-site scripting flaws were fixed by Adobe in Experience Manager as part of its regularly scheduled patches.

While virtual private networks once boosted security, their current design doesn't fulfill the evolving requirements of today's modern enterprise.

Google plans to build out its Confidential Computing portfolio with the launch of Confidential GKE Nodes for Kubernetes workloads.

The vulnerability in WordPress File Manager could allow a malicious actor to take over the victim's website.

The hacker admitted last year that he broke into two companies – one his former employer – and stole more than 15,000 files.

The critical Intel vulnerability could allow unauthenticated attackers gain escalated privileges on Intel vPro corporate systems.

The most concerning of the disclosed bugs would allow an attacker to take over Microsoft Exchange just by sending an email.

This month's Patch Tuesday brought fixes for 23 critical vulnerabilities, including a notable flaw in Microsoft Exchange.

In a rare twist, 'next-gen' isn't just marketing-speak when it comes to next-gen firewalls, which function differently than traditional gear and may enable you to replace a variety of devices.

Malware can take over common device functions as well as creates a phishing page to steal Facebook credentials.

How do you spot and deal with fake system alerts on both computers and mobile devices?

In the wake of COVID-19, today's remote workforce is here to stay, at least for the foreseeable future. And with it, an increase in identity-related security incidents.

Researchers warn of critical vulnerabilities in a third-party industrial component used by top ICS vendors like Rockwell Automation and Siemens.

An interdisciplinary research team constructs a way for companies to share breach data without revealing specific details that could exposes businesses to legal risk.