Malicious emails with macro-enabled Word documents are spreading a never-before-seen remote-access Trojan, researchers say.

‘A comprehensive tool that can take you from crawl to walk to run’

Why a private college that stayed in business for 157 years had to close after the combo of COVID-19 and ransomware proved too much.

The update also included critical fixes for a number of flaws found in infrastructure present in many enterprise and cloud environments.

The ‘Russian alternative to YouTube’ has been offline since Monday

A novel form of phishing takes advantage of a disparity between how browsers and email inboxes read web domains.

Dell and HP were among the first to release patches and fixes for the bug.

Attackers could abuse the vanity subdomains of popular cloud services such as Box.com, Google, and Zoom to mask attacks in phishing campaigns.

Enterprises should consider online data brokers as part of their risk exposure analysis if they don't already do so.

IceApple's 18 separate modules include those for data exfiltration, credential harvesting, and file and directory deletion, CrowdStrike warns.

How good is your cybersecurity? Are you making the same mistakes as lots of other people? Here’s some real-life advice…