Apple has issued its January security updates fixing a list of mostly shared CVE flaws affecting iOS and macOS with a smattering for Safari, watchOS, tvOS, and iCloud for Windows.

With the CISO at the table, organizations must focus on products, processes, and people to stay secure, according to the executive director of the National Cyber Security Alliance.

Did you see the story about the US family whose Nest camera “warned” them of an impending nuclear attack? Here’s how to keep hackers out…

The decision means Yelp, and other platforms, are still protected from liability for user-submitted content under the CDA’s Section 230.

A bomb threat spam campaign that hit North America last month may have been engineered using a flaw in GoDaddy’s domain management process, it was revealed this week.

Come to Black Hat Asia in March for an expert look at what's happening in the world of Internet of Things, and what you can do to secure it.

These apps will help keep your enterprise safe from malware and other cybersecurity threats.

Perpetrators are using smaller, bit-and-piece methods to inject junk into legitimate traffic, causing attacks to bypass detection rather than sounding alarms with large, obvious attack spikes.

Security updates for the lifespan of a given device are critical to protecting your connected device against hackers, according to a Barracuda report.

Multicloud is much more popular than hybrid cloud, with only 33% of professionals using a hybrid model, according to a Kentik report.

The big corporations may grab the headlines, but America's SMBs have the most to lose in the aftermath of a data breach.

Credential compromise emerged the main target for phishing campaigns in 2018 - rather than infecting victims' devices with malware.

The most common attacks involved software vulnerabilities, stolen credentials, Web applications, and IoT devices.

Using Google App Engine to mask the destination of links is a staggeringly easy way to conduct a phishing campaign, but Google claims it is not their problem.

Attack threatens victims with three deadly malware infestations if they don't give up critical email account credentials.

Attack threatens victims with three deadly malware infestations if they don't give up critical email account credentials.

Make using SSH key authentication a snap with the new ssh-agent feature found in KeePassXC.

You can call it collateral damage. You can call it trickledown cyberwarfare. Either way, foreign hacker armies are targeting civilian enterprises — as a means of attacking rival government targets.

Breach latest example of how misconfigurations, human errors undermine security in a big way, experts say.

A new wave of attacks abuses the Google Cloud Platform URL redirection in PDF decoys, sending users to a malicious link.

A look at API attack trends such as the current (and failing) architectural designs for addressing security of these API transactions.