Container manager vulnerability is one of several weaknesses and vulnerabilities recently disclosed for Docker.

The struggling retailer’s back-end services have been impacted, according to a report, just in time for the holidays.

A newly discovered module checks machines for flaws in the UEFI/BIOS firmware so malware can evade detection and persist on a device.

Researchers detail how a Android APK obfuscation service automates detection evasion for highly malicious apps.

Companies involved in technologies for keeping vaccines cold enough for safe storage and transportation are being targeted in a sophisticated spear-phishing campaign, IBM says.

The attack, which prevented Translink users from using their metro cards or buying tickets at kiosks, is the second from the prolific threat group just this week.

Flash will be gone by the end of the year, but the ecosystem that allowed it to become a software security serial killer is ready to let it happen again.

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

VMware has issued a full patch and revised the severity level of the NSA-reported vulnerability to "important."

Trickbot's new tricks, attacking vaccine cold chains, and CFAA in front of the Supreme Court - catch up on all of the week's infosec news with the Friday Five!