Recommended best practices not effective against certain types of attacks, they say.

Recommended best practices not effective against certain types of attacks, they say.

Can your phone reliably detect card skimmers using Bluetooth alone? Find out in the latest Naked Security Live video…

Facebook announced it’s tweaking its Android version, which was tracking your location even when the app wasn’t in use.

Weigh in on password managers with our Threatpost poll.

Can YouTube ever keep video comments under control, or it is time to kill off comments altogether?

When it comes to cloud security, know the difference between a great--or just okay--cloud vendor.

There's no better place to bone up on the ins and outs of web security than Black Hat Asia in Singapore next month.

Preventative technologies are only part of the picture and often come at the expense of the humans behind them.

This bill requires businesses to notify consumers of compromised passport numbers and biometric data.

From password manager vulnerabilities to 19-year-old flaws, the Threatpost team broke down this week's biggest news stories.

The DHS plots a move to the cloud, China embraces data protection, and ATM hacking - catch up with the week's top infosec stories with this roundup!

VPNs are critical for information security. But simply having these cozy security tunnels in the toolkit isn't enough to keep an organization's data safe.

U.S. and subcontinent consumers were the most affected by this week's exposure revelations.

Threatpost talks to HackerOne CEO Marten Mickos on the EU's funding of open source bug bounty programs, how a company can start a program, and the next generation of bounty hunters.

Despite the openness of the Android platform, Google has managed to keep its Play store mainly free of malware and malicious apps. Outside of the marketplace is a different matter.

LinkedIn profiles provide a persistent, patient threat actor with the information required to craft spear-phishing messages.

There was a shocking turn of events in crypto-world.

Phishing emails target a bank's users with malware - and make their landing page look more legitimate with fake Google reCAPTCHAs.