Researcher claims he found RCE, authentication bypass, CSRF flaws

The info-stealing campaign using ZLoader malware – previously used to deliver Ryuk and Conti ransomware – already has claimed more than 2,000 victims across 111 countries.

Attackers leverage software supply chain to compromise high-traffic sites

Organizations need to take matters into their own hands with a new approach.

The finder of this bug insists it “poses a serious risk”. We’re not so sure, but we recommend you take steps to avoid it anyway.

Remember the Equifax breach? Remember the $700m penalty? In case you’d forgotten, here’s the FTC to refresh your memory!

Alleged misuse of bug bounty and failure to disclose breach leads to criminal charges

Efforts to tune or build behavior- or signature-based threat identification requires time and effort most organizations don't have.

The Kennedy Space Center kick-started Andee Harston's career in cybersecurity. Here's how she worked her way up to overseeing the cybersecurity curriculum for Infosec.

Already impacting more than 2,000 victims, the malware is able to modify a DLL file digitally signed by Microsoft, says Check Point Research.

Companies that fail to protect consumer data from Log4J attacks are at risk of facing Equifax-esque legal action and fines, the FTC warned.

The massive Amazon Web Services outage in December had many security leaders asking whether they should be going multicloud or multiregion for their cloud environments.