An ongoing malicious email campaign that includes macro-laden files and multiple layers of obfuscation has been active since late December.

Attack vector abuses permissions to force CI pipelines to execute arbitrary commands

If your policies don't keep up with your work models, your company's sensitive information could be at risk.

The days of security as a second-class citizen are over.

Social engineering technique confuses victims to gain entry to their accounts

On the plus side, only instances with non-standard not recommended configurations are vulnerable. On the downside, those configurations aren't easy to track down, and it's easy as pie to exploit.

A group of five security vulnerabilities could lead to a range of bad outcomes for virtual-machine enthusiasts, including command execution and DoS.

A network intrusion at the International Committee for the Red Cross (ICRC) in January led to the theft of personal information on more than 500,000 people receiving assistance from the group. KrebsOnSecurity has learned that the email address used by…

Solution monitors and protects public cloud data.

Contract extends Attivo’s strategic support to the three major branches of the DoD – Air Force, Army, and Navy.

Applications will be open throughout all Black History Month and accepted until March 1, 2022.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading