A vendor exposed the records, which were accessible with no password or other authentication, likely because of a cloud-storage misconfiguration.

An email campaign asking victims to call a bogus number to suspend supposedly fraudulent subscriptions got right past Microsoft's native email controls.

Consider four factors and behaviors that impact a particular employee's risk, and how security training should take them into account.

Learn about the different types of classification and how to effectively classify your data in Data Protection 101, our series on the fundamentals of data security.

The intro-level networking gear for SMBs could allow remote attacks designed to steal information, drop malware and disrupt operations.

Cops arrest six, seize cars and cash in splashy raid, and experts are applauding.

The cruise ship operator says the incident affected employee and guest data.

Information-stealing malware makes up about a third of attacks, a study finds, but companies worry most about ransomware shutting down production.

New data privacy acts, the G7 on ransomware, and how cybersecurity factors into M&As - catch up on all of the week's infosec news with the Friday Five!