Chip maker Nvidia has released a security update, fixing eight CVE flaws in its Windows and Linux graphics display drivers.

The China-linked threat group has returned in 2018 using updated RATs to launch its attacks, including ZxShell, Gh0st RAT, and SysUpdate malware.

A major data breach would likely shut down half of SMBs permanently, according to an AppRiver report.

Here’s the latest Naked Security podcast – enjoy!

In the cyber threat climate of the 21st century, sticking with DevOps is no longer an option.

Many machines, including almost all Apple laptops and desktops produced since 2011, are vulnerable to data exfiltration via weaponized peripherals.

SentinelOne and Intel announced a new method to detect cryptomining and cryptojacking attacks using hardware-based detection technology.

Third time's hopefully a charm for Cisco as it patches a high-severity Webex flaw once again.

Researchers are urging Ring users to update to the latest version of the smart doorbell after a serious flaw triggered privacy concerns.

The campaign is marked by a significant level of customization, with an “individualized yet very consistent approach to every compromise

Researchers investigate malicious apps designed to intercept calls to legitimate numbers, making voice phishing attacks harder to detect.

Learn about what GLBA means for data protection and how to achieve GLBA compliance in Data Protection 101, our series on the fundamentals of information security.

Operating a database of software vulnerabilities is a challenging undertaking, according to private vulnerability database operator Risk Based Security.

Although human oversight is required, advanced technologies built on AI will become pivotal in building safer financial markets and a safer world.

Vishwanath Akuthota has been accused of using a 'USB killer device' to destroy dozens of computers, officials report.

CQTools suite includes both exploit kits and information-extraction functions, its developers say.

Illinois man offered DDoS for hire services that hit millions of victims.

The new Intel SGX Card is intended to extend application memory security using Intel SGX in existing data center infrastructure.

Study of the Bronze Union group-also known as APT27 or Emissary Panda-underscores how most advanced persistent threat (APT) groups now use administrative tools or slight variants of well-known tools.

As in previous years, input validation vulnerabilities accounted for a substantial proportion of total, Risk Based Security report shows.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading