The 2021 Strategic Security Survey highlights concerns related to the cloud environment, such as the ability to detect breaches and the increasing number of attacks against cloud systems.

Buffer overflow flaw should be patched immediately

Increased digitization makes strong cybersecurity more important than ever.

Critical flaw in the H2 open-source Java SQL database are similar to the Log4J vulnerability, but do not pose a widespread threat.

Quartet of software flaws addressed ahead of next major release of popular CMS

Impact of JNDI bug mitigated by vulnerable behavior being disabled by default

There are active ransomware and brute-force attacks being launched against internet-exposed, network-attached storage devices, the device maker warned.

We’re back for 2022 – listen now!

“It’s Log4Shell, Jim, but not as we know it.” How to find and fix a JNDI-based vuln in the H2 Database Engine.

The new opt-in feature turns your idle PC into a cryptominer, with Norton skimming 15% off the top, plus market fees.

Logic flaw exists in malware that can be used to prevent it from encrypting remote shares, security vendor says.

A recently finalized settlement will require the company maintain proper data security safeguards and undergo periodic audits.

Attackers are trading millions of records from a trio of pre-holiday breaches on an online forum.

A scientist pleads guilty to stealing trade secret data, a new proof-of-concept iPhone Trojan, and more - catch up on the infosec news of the week with the Friday Five!

A crisis at Microsoft, the ransomware resurgence, and endless zero-days dominated headlines

The agency appears to be cracking down on the widespread security flaw as attack attempts remained high over the holiday period

The flaw, which causes a slow down in the user verification process, needs to be installed manually by IT admins

The two separate data incidents occurred in 2016 and 2019 and concerned the investment bank's handling of legacy IT equipment

The blue screen of death in Windows 11 can be frustrating but it's relatively easy to fix

Most also believe it should be made illegal to pay ransoms to hackers

The SOAR specialist has been described as "the missing piece" for Google's Chronicle platform