Google debuted a series of security updates at Next 2019, giving users the option to use their phone as a second authentication factor.

Integrating cloud environments is anything but easy. Evaluating the security risks in doing so must be a starting component of an overall M&A strategy.

State executive agencies, namely Department of Human Services offices, have increasingly found themselves the victims of successful phishing scams.

State executive agencies, namely Department of Human Services offices, have increasingly found themselves the victims of successful phishing scams.

At the Security Analyst Summit, Threatpost editor Tara Seals catches up with Joe FitzPatrick, researcher with Securing Hardware, to discuss supply chain threats.

Malware campaign, which finds and exfiltrates a user's contact list and banking credentials, could potentially grow to global proportions.

Bill takes aim at all the tricks Facebook uses to convince people to give up their personal data, and all the games that addict kids.

Researchers analyzed 55.5 million emails and found one out of every 99 messages contains a phishing attack.

Third parties such as ad, search engine, and analytics firms often have access to guest name, address, phone numbers, credit cards and other data, Symantec says.

FireEye Mandiant incident responders reveal a new attack by the hacking group that previously targeted a petrochemical plant in Saudi Arabia in 2017.

With an upfront investment of about $1,000, attackers can more than double their money, according to a report from Carbon Black.

A smartphone app used to control vehicles across North America left them wide open to attackers, it was revealed this week.

Congressional leaders in the US unveiled a new law this week to ban the use of ‘dark patterns’ by large online players.

A father thought he’d been permanently locked out of his Apple iPad after his young son repeatedly entered an incorrect passcode.

Amazon is under fire for its privacy policies after a Bloomberg report revealed that the company hires auditors to listen to Echo recordings.

Understaffed and overburdened cybersecurity teams are stretched too thin to cover the entire attack surface, according to a Ponemon / IBM report.

IT pros are more concerned with user error and malicious insiders than compromised accounts, according to a Gurucul report.

The sandbox is an important piece of the security stack, but an organization's entire strategy shouldn't rely on its ability to detect every threat. Here's why.

Got a mailing list? Ever signed up for one? Ever stopped to think how a crook could abuse the security-related confirmation process?