Apple is facing a lawsuit from a user claiming that two-factor authentication is a "waste of their personal time." Here's why businesses shouldn't ignore the security measure.

Hackers up to 100 meters away could take over Xiaomi M365 scooters to brake or accelerate them.

A fundamental component of container technologies like Docker, cri-o, containerd and Kubernetes contains an important vulnerability that could cause cascading attacks.

We examine the issue of fallibility from six sides: end users, security leaders, security analysts, IT security administrators, programmers, and attackers.

"Every file server is lost, every backup server is lost.”

Users of the popular plugin, Simple Social Buttons, are encouraged to update to version 2.0.22.

All data belonging to US users—including backup copies—have been deleted in catastrophe, VFEmail says.

In its February Patch Tuesday bulletin Microsoft patches four public bugs and one that under active attack.

Dunkin’ Donuts’ loyalty program was hit with a credential stuffing attack that targeted names, email addresses, 16-digit DD Perks account numbers and DD Perks QR codes.

With their regularly scheduled Patch Tuesday updates, both companies issued fixes for scores of vulnerabilities in their widely used software.

Australian property valuation firm Landmark White exposed files containing personal data and property valuation details.

The affected SICAM 230 process control system is used as an integrated energy system for utility companies, and as a monitoring system for smart-grid applications.

Adobe has patched a flaw that enabled attackers to slurp a user’s network authentication details – but not before someone else patched it first.

Some of the breaches are new, while some were reported last year. The sites include MyFitnessPal, MyHeritage, Whitepages and more.

Only one in three organizations say they are confident they can prevent data breaches, according to Balbix.

Here’s the latest Naked Security podcast – enjoy!

Apple has less of an iron grip over iOS than first thought, as organizations are using the Developer Enterprise Program for apps that would not be allowed in the App Store.

Apple has since acknowledged the flaw.

The issue affects default installations of Ubuntu Server and Desktop and is likely included in many Ubuntu-like Linux distributions.

… and enables de-authenticaton attacks that could knock targeted systems off the Wi-Fi and onto one of these nefarious cables.