The stealthy, feature-rich malware has multistage evasion tactics to fly under the radar of security analysis, researchers at Proofpoint have found.

The U.S. Drug Enforcement Administration (DEA) says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is…

This year's Black Hat Asia is hybrid, with some sessions broadcast on the virtual platform and others live on stage in Singapore. News Desk is available on-demand with prerecorded interviews.

Tony Lauro, director of security technology and strategy at Akamai, discusses reducing your company's attack surface and the "blast radius" of a potential attack.

The end-to-end cybersecurity 5G testing lab will help identify and prevent cyberattacks on 5G networks.

Attack technique bypasses email filters and burnishes credibility of phishing links

WannaCry continues to be a reminder of the challenges that organizations face dealing with the ransomware threat.

Researcher shares how he unearthed newer bugs in Apple's operating system by closer scrutiny of previous research, including vulnerabilities that came out of the Pwn2Own competition.

Researchers discovered a simple malware builder designed to steal credentials, then pinging them to Discord webhooks.

By understanding how FaaS works and following best practices to prevent it, your business can protect its customers, revenue, and brand reputation.

Conti, Lockbit, and other prolific ransomware strains apparently have similar vulnerabilities

Five years since WannaCry exploded onto the scene, ransomware still tops global threat lists

Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world.

Latest episode – lots to learn – plain English – fun with a serious side – listen now!