Attackers use the comment feature in Google Docs to email victims and lure them into clicking malicious links.

The 2021 Strategic Security Survey highlights concerns related to the cloud environment, such as the ability to detect breaches and the increasing number of attacks against cloud systems.

Buffer overflow flaw should be patched immediately

Increased digitization makes strong cybersecurity more important than ever.

Critical flaw in the H2 open-source Java SQL database are similar to the Log4J vulnerability, but do not pose a widespread threat.

Quartet of software flaws addressed ahead of next major release of popular CMS

Impact of JNDI bug mitigated by vulnerable behavior being disabled by default

There are active ransomware and brute-force attacks being launched against internet-exposed, network-attached storage devices, the device maker warned.

We’re back for 2022 – listen now!

“It’s Log4Shell, Jim, but not as we know it.” How to find and fix a JNDI-based vuln in the H2 Database Engine.

The new opt-in feature turns your idle PC into a cryptominer, with Norton skimming 15% off the top, plus market fees.

Logic flaw exists in malware that can be used to prevent it from encrypting remote shares, security vendor says.

A recently finalized settlement will require the company maintain proper data security safeguards and undergo periodic audits.

Attackers are trading millions of records from a trio of pre-holiday breaches on an online forum.

A scientist pleads guilty to stealing trade secret data, a new proof-of-concept iPhone Trojan, and more - catch up on the infosec news of the week with the Friday Five!

A crisis at Microsoft, the ransomware resurgence, and endless zero-days dominated headlines