The deadline looms for U.S. Cybersecurity and Infrastructure Security Agency’s emergency directive for federal agencies to patch against the so-called ‘Zerologon’ vulnerability.

Data exposed included search terms, location coordinates, and device information - but no personal data.

Nathan Wyatt was sentenced to five years in prison after changing a previously not guilty plea.

Nathan Wyatt was sentenced to five years in prison after changing a previously not guilty plea.

When it comes to endpoint security, a handful of threats make up the bulk of the most serious attack tools and tactics.

More than three-quarters of IT executives worry that data sprawl puts their data at risk, especially with employees working from insecure home networks, survey finds.

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

New research shows how security skills are lacking across multiple IT disciplines as well - including network engineers, sys admins, and cloud developers.

Keeping the hackers out remains a top priority but firms are also looking at new areas of investment.

Thirty-nine percent of developers said the security team is responsible for securing apps, while 67% of AppSec practitioners said their teams are responsible, according to a new study.

In today's Covid19 era, managing access has become even more difficult, especially for large organizations. Here's how to get it just right.

A too-large percentage of cloud databases containing highly sensitive information are publicly available, an analysis shows.

The Call of Duty behemoth said that the reports of widespread hacks are false.

Mozilla has fixed three high-severity flaws with the release of Firefox 81 and Firefox ESR 78.3.

Microsoft announced a new Security Guide to help cybersecurity professionals more quickly untangle relevant bugs in its monthly security bulletins.

The update, one of several announced today, is intended to help employees remain compliant when handling data across cloud applications.

Understaffed, underfunded, and underequipped, IT teams in the K-12 sector face a slew of challenges amid remote and hybrid learning models. Here's where they can begin to protect their schools against cyberattacks.

Windows MSI files provide an opening for attackers even though the bug was mostly patched in July.

Security service JupiterOne spins off from a healthcare service provider's homegrown technology.

Three incidents demonstrate how cybercriminals leverage the scourge of black-hat search engine optimization to manipulate search results.

An investigation by HHS OCR at this clinic uncovered "longstanding, systemic noncompliance with the HIPAA Privacy and Security Rules."