The December rollout includes 67 security patches and addresses one zero-day and five more publicly known vulnerabilities.

December's Patch Tuesday updates address six publicly known bugs and seven critical security vulnerabilities.

The attack forced a shutdown of computer systems and websites for Virginia legislative agencies and commissions, reports state.

Security professionals are burning out from handling too many tools and facing a growing number of threats, and more than 40% see lack of leadership as the main problem.

Microsoft, Adobe, and Google all issued security updates to their products today. The Microsoft patches include six previously disclosed security flaws, and one that that is already being actively exploited. But this month's Patch Tuesday is being overshadowed…

North America-based Superior Plus "temporarily disabled" some of its systems in the wake of the attack.

It took just 15 seconds to hack the latest, greatest, shiniest iPhone 13 Pro on stage at the Tianfu Cup in October, using a now-fixed iOS kernel bug.

Qubes OS defines itself modestly as "a reasonably secure operating system." It might actually be one of the safest operating systems, often used by pros who are most concerned with computer security.

Amid the increase in Log4j attack activity, at least one Iranian state-backed threat group is preparing to target the vulnerability, experts say.

Google Survey of 1,000 U.S. consumers uncovers data privacy disconnect, a call to action for businesses.

Automates security policy design to ensure compliance and reduce likelihood of breach announcing significant updates to other marketplace apps.

Sounil Yu, CISO at JupiterOne, discusses the growing mesh of integrations between SaaS applications, which enables automated business workflows – and rampant lateral movement by attackers, well outside IT's purview.

Hybrid work is here to stay, and organizations can apply zero trust's three core principles to ensure a secure workforce, Devata says.

Commentary: Those searching for a single cause for the Log4j vulnerability – whether it's open source is not secure, or open source is not sustainable – are getting it wrong. It's a complicated issue.

Not only is the jaw-dropping flaw in the Apache Log4j logging library ubiquitous; Apache’s blanket of a quickly baked patch for Log4Shell also has holes.

Kryptowire’s end-to-end cybersecurity engine identified vulnerabilities granting system user-level privileges for arbitrary shell script execution.

Cloud security is a shared responsibility. which sometimes leads to security gaps and complexity in risk management.