Einstein is in violation of the the HHS 60-day breach notification rule, but unlikely to face penalty.

Researchers have traced the origins of a campaign - infecting SQL servers to mine cryptocurrency - back to an Iranian software firm.

The guidelines are supposed to help data controllers when it comes to deciding how to handle data breaches and what factors to consider during risk assessment.

Operators behind a global phishing campaign inadvertently left thousands of stolen credentials accessible via Google Search.

If you've ever been tempted to change your Google account password, but weren't sure how, don't let that confusion stop you. Jack Wallen walks you through the process.

Attackers focused more on ransomware, while the consolidation of data into large databases led to fewer reported breaches but more records leaked.

Researchers from Zscaler and Check Point describe botnets as designed for DDoS attacks, cryptocurrency mining, and other malicious purposes.

The SolarWinds compromise means you can no longer put off privileged account management.

Professionals union Prospect warned that the UK was at risk of 'sleepwalking into a world of surveillance' as more businesses turn to digital tools to keep tabs on remote workers.

Netscout researchers identify more than 14,000 existing servers that can be abused by ‘the general attack population’ to flood organizations’ networks with traffic.

Hiding digital “secrets” where they’re supposed to be found is good fun. Just don’t hide actual secrets and hope no one will notice!

The new Edge 88 browser includes tough new security features, including a password generator and a tool for monitoring whether your login details have been exposed to the dark web.

North Korea is laser-focused on boosting its cyber capabilities, and it's doing a remarkable job of it.

Copycats, searchable phishing campaigns, and cybersecurity policy in the new administration - catch up on all of the week's infosec news with the Friday Five!

Up to 4,000 stolen files have been released by hackers who launched a ransomware attack against the Scottish Environmental Protection Agency on Christmas Eve.