Researchers say that Microsoft won't issue a patch for the issue.

At least 463,546 malicious URLs contained in the 28.4 million analyzed emails made it through to corporate in-boxes in Q4 of 2018.

Raoul Strackx, one of the researchers who discovered the Foreshadow speculative execution vulnerability, talks at RSA about the Catch-22 issue when it comes to fixing speculative execution flaws.

Adobe has issued an urgent patch for a critical flaw in the ColdFusion web development platform it says is being exploited in the wild.

It didn’t require an account PIN to switch carriers. Everybody uses 0000, it said, making it easier for customers… and phone hijackers.

Consumer confidence in companies keeping their data safe is at an all-time low, but password hygiene and not reading EULAs and app permissions remain big problems.

But by the time they became aware, attackers have been on their networks for more than six months, new 2018 data shows.

The Jmail Breaker attack leverages an old vulnerability in Joomla! along with a newly found flaw in the mail module.

IT managers are flying blind in the battle to protect their companies from cyber attacks, according to a new Sophos survey.

More than half (51%) of respondents said their security teams spend more time on manual processes than handling vulnerabilities, according to a Tenable and Ponemon report.

Untrained insiders and foreign governments create huge cybersecurity risks in government agencies, according to a SolarWinds report.

A scammer ring, dubbed Scarlet Widow, has targeted nonprofits, schools and universities with an array of business email compromise (BEC) attacks over the past few months.

You can turn to your trusty Apple Watch to log into websites that use your Microsoft Account. Here's how.