Armed with stolen credentials from another breach or from a misconfigured file, attackers delete developers' repositories on GitHub, Bitbucket, and GitLab, leaving behind ransom notes.

After researchers were able to bypass a file upload validation flaw patch in WP Live Chat, a new patch has been issued.

Scammers are figuring out unique ways of abusing cloud services to make their attacks look more genuine, Netskope says.

From malware-stuffed piracy apps to the Docker breach, get yourself up to date with everything we wrote last week – it’s roundup time.

Singapore’s central bank sent a payment to Canada using blockchain technology last week, in a clear signal that the technology has value.

It went down in flames, with a rogue admin blackmailing vendors and buyers and leaking login credentials and the IP address.

The updated Add-on Policy aims to rid Firefox of third-party malicious code that hides what it’s really up to.

Turla hacking team abuses a legitimate feature of the Exchange server in order to hide out and access all of the target organization's messages.

Behavioral biometrics is a building block to be used in conjunction with other security measures, but it shows promise.

One moment, the defenders’ network looked secure but the next, as if out of nowhere, the ransom note pops up.

Oleksii Petrovich Ivanov has been extradited in the U.S. after allegedly launching malvertising campaigns that caused victims to view malicious ads on more than 100 million occasions.